
Product
Socket MCP Adds Org Alerts, Threat Feed Review, and Package Inspection
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.
cloud-config-client
Advanced tools
Requires: NodeJS 4+
Feature requests are welcome.
npm install cloud-config-client --save
const client = require("cloud-config-client");
client.load({
application: "invoices"
}).then((config) => {
// Look for a key
const value1 = config.get("this.is.a.key");
// Using a prefix, this is equivalent to .get("this.is.another.key");
const value2 = config.get("this.is", "another.key");
});
load functionObject, mandatory:
string, optional, default=http://localhost:8888: Config server URL.boolean, optional, default = true: if false accepts self-signed certificatesstring, deprecated, use name: Load configuration for this application.string, mandatory: Load the configuration with this name.string|string[], optional, default="default": Load profiles.string, optional: Load environment.Object, optional: Basic Authentication for access config server (e.g.: { user: "username", pass: "password"}).
endpoint accepts also basic auth (e.g. http://user:pass@localhost:8888).
string, mandatorystring, mandatoryhttp.Agent|https.Agent, optional: Agent for the request. (e.g. use a proxy) (Since version 1.2.0)function(error: Error, config: Config), optional: node style callback. If missing, the method will return a promise.client.load(options)
.then((config) => { ... })
.catch((error) => { ... })
// or
client.load(options, (error, config) => { ... })
// or
async function foo () {
const config = await client.load(options)
//...
}
Config objectraw: Spring raw response data.properties: computed properties as per Spring specification:
Property keys in more specifically named files override those in application.properties or application.yml.
get(...parts): Retrieve a value at a given path or undefined. Multiple parameters can be used to calculate the key.
string, variable, mandatory:forEach(callback, includeOverridden): Iterates over every key/value in the config.
function(key: string, value: string), mandatory: iteration callback.boolean, optional, default=false: if true, include overridden keys.toString(spaces): string: Returns a string representation of raw property.
number, optional: spaces to use in format.toObject(): object: Returns the whole configuration as an object. (Since version 1.3.0)config.get("this.is.a.key");
config.get("this.is", "a.key");
config.get("this", "is", "a", "key");
config.forEach((key, value) => console.log(key + ":" + value));
Example (adapted from https-proxy-agent site):
const HttpsProxyAgent = require('https-proxy-agent')
const client = require('cloud-config-client')
const proxy = process.env.http_proxy || 'http://168.63.76.32:3128'
console.log('using proxy server %j', proxy)
const agent = new HttpsProxyAgent(proxy)
const options = {
application: 'demo',
profiles: ['test', 'timeout'],
agent
}
client.load(options).then((cfg) => {
console.log(cfg.get('test.users', 'multi.uid'))
console.log(cfg.toString(2))
}).catch((error) => console.error(error))
FAQs
Spring Cloud Config Client for NodeJS
The npm package cloud-config-client receives a total of 6,856 weekly downloads. As such, cloud-config-client popularity was classified as popular.
We found that cloud-config-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.