Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Confi loads configuration data from yaml, json or from a package.json
with support for NODE_ENV
overrides.
npm install confi
or
yarn add confi
Note: confi()
is an async method.
Note: Default configuration directory is ./conf/
Configuration files that start with default
are loaded and merged together. This allows you to split up configuration logic into smaller files.
You can create a file that matches NODE_ENV
which will apply it's values on top of anything set in default. This allows you to create configuration for production and development environments.
User specific configuration can be created as well by placing config files in a users
directory inside of the config directory.
./conf/default.yaml
title: 'Example Site'
site:
name: '{{ title }} - DEV'
updateEvery: '{{ ms("1h") }}
appId: '{{ getEnv("APP_ID", '09830948029384') }}'
shot: false
./conf/users/han.json
{
"shot": true
}
./conf/production.yaml
site:
name: '{{ title }}'
updateEvery: '{{ getEnv("UPDATE_EVERY", ms("1h")) }}'
Basic
const confi = require('confi');
async function startApp() {
const config = await confi();
console.log(config.site.name); // Example Site - DEV
console.log(config.appId); // 09830948029384
console.log(config.updateEvery); // 3600000
console.log(config.shot); // false
}
startApp();
User
const confi = require('confi');
async function startApp() {
const config = await confi({
user: 'han'
});
console.log(config.site.name); // Example Site - DEV
console.log(config.appId); // 09830948029384
console.log(config.updateEvery); // 3600000
console.log(config.shot); // true
}
startApp();
Environment
// imagine process.env.UPDATE_EVERY is 10000
const confi = require('confi');
async function startApp() {
const config = await confi({
env: 'production'
});
console.log(config.site.name); // Example Site
console.log(config.appId); // 09830948029384
console.log(config.updateEvery); // 10000
console.log(config.shot); // true
}
startApp();
For more examples, see the test directory.
confi([options])
path
- Supply an alternate path to load config from. Default: process.env.CONFI_PATH
or ./conf
env
- Manually set the envitonment. Default: dev
userPath
- Path for user overrides. Default: ./conf/users
context
- Advanced option to pass additional information to varson
for parsing configs.helpers
- Additional helper methods to expose.user
- Which user shall the user config be loaded for.Confi comes with a set of helper methods. You can find documentation for them here.
A First + Third Project
FAQs
a simple configuration library
We found that confi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.