
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
config-dot-get
Advanced tools
config-dot-get is a lightweight JSON configuration reader that allows developers to retrieve and modify settings using dot notation. It efficiently handles nested configuration values.
npm install config-dot-get
const ConfigReader = require("config-dot-get");
const config = new ConfigReader("config.json");
// Get a value using dot notation
console.log(config.get("transpile.debug", true)); // Returns the value or default (true)
// Set a value
config.set("logging.level", "info");
console.log(config.get("logging.level")); // "info"
🔹 Basic Usage
const ConfigDotGet = require("config-dot-get");
const config = new ConfigReader("config.json");
// Retrieve a top-level value
console.log(config.get("app.name")); // Example output: "MyApp"
// Retrieve a nested value using dot notation
console.log(config.get("database.host")); // Example output: "localhost"
// Provide a default value if the key is missing
console.log(config.get("server.port", 3000)); // Example output: 3000 (default)
🔹 Setting Values
// Modify a value dynamically
config.set("logging.level", "debug");
// Retrieve the updated value
console.log(config.get("logging.level")); // Example output: "debug"
🔹 Handling missing values
console.log(config.get("feature.enable", false)); // Returns default (false)
🔹 Working with Nested Configuration
// Config structure (config.json)
// {
// "database": {
// "host": "localhost",
// "port": 5432
// }
// }
// Access nested values
console.log(config.get("database.port")); // Example output: 5432
Use default values: Always provide a default value when retrieving configuration settings to avoid unexpected undefined values.
const port = config.get("server.port", 3000);
Keep configuration organized: Structure JSON files logically to prevent deep nesting that may be difficult to maintain.
Validate input: Ensure the retrieved values match expected data types to prevent runtime issues.
const logLevel = config.get("logging.level", "info");
if (typeof logLevel !== "string") {
throw new Error("Invalid log level type");
}
Avoid hardcoding paths: Store key paths in constants for better maintainability.
const SERVER_PORT = "server.port";
const port = config.get(SERVER_PORT, 3000);
Use .set() responsibly: Modify configuration settings only when necessary to prevent unintended overrides.
config.set("feature.enabled", true);
This package is licensed under MIT License.
FAQs
A simple JSON configuration reader with dot notation support
We found that config-dot-get demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.