Security News
PyPI Expands Trusted Publishing to GitLab Self-Managed as Adoption Passes 25 Percent
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads
By Sarah Gooding - Nov 14, 2025
@rushstack/heft-config-file
Advanced tools
@rushstack/heft-config-file
A library for loading config files for use with the Heft build system.
Links
- CHANGELOG.md - Find out what's new in the latest version
- API Reference
Heft is part of the Rush Stack family of projects.
Other packages similar to @rushstack/heft-config-file
cosmiconfig
Cosmiconfig is a popular library for finding and loading configuration files. It supports a variety of file formats and locations. Compared to @rushstack/heft-config-file, cosmiconfig is more flexible in terms of file formats and locations but does not provide built-in schema validation.
config
The config package is a configuration manager for Node.js applications. It allows you to define configuration files in a hierarchical manner and supports environment-specific configurations. Compared to @rushstack/heft-config-file, the config package is more focused on managing hierarchical configurations and environment-specific settings.
rc
The rc package is a simple configuration loader that supports various file formats and locations. It is lightweight and easy to use. Compared to @rushstack/heft-config-file, rc is more lightweight and flexible but lacks advanced features like schema validation.
FAQs
Configuration file loader for @rushstack/heft
The npm package @rushstack/heft-config-file receives a total of 225,628 weekly downloads. As such, @rushstack/heft-config-file popularity was classified as popular.
We found that @rushstack/heft-config-file demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Package last updated on 08 Oct 2025
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Research
/Security News
Malicious Chrome Extension Exfiltrates Seed Phrases, Enabling Wallet Takeover
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.
By Kirill Boychenko - Nov 12, 2025
Security News
Meet Socket at Black Hat Europe and BSides London 2025
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.
By Anders Søndergaard - Nov 11, 2025