Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Stupid simple configuration.
configya
reads the following:
Note: you can now provide both a configuration file and a defaults object
Unless you've set a deploy-type
environment variable = 'DEV', configya
will always overwrite keys from a configuration file and defaults hash with duplicates found in the environment.
configya
parses all sources into an object hierarchy based on _
delimited key names. For example, if you have a key named RABBIT_BROKER_IP
set to '127.0.0.1', and another named RABBIT_BROKER_PORT
set to 5672, the resulting configuration object will be:
{
rabbit: {
broker: {
ip: "127.0.0.1",
port: "5672"
}
}
}
Note: All keys are lower-cased to eliminate the need for guessing games (and capslock)
The original keys are technically still stored on the object based on their source.
Note: These are really here for diagnostic/backwards compatibility. You shouldn't use/rely on them in your code.
//without a config file or defaults (using only environment)
var cfg = require( 'configya' )();
//with a config file as well
var cfg = require( 'configya' )( './path/to/configuration.json' );
//with a defaults hash
var cfg = require( 'configya' )( { RABBIT_BROKER_PORT: 5672 } );
//with defaults and a config (order of args doesn't matter)
var cfg = require( 'configya' )( { rabbit: { broker: { port: 5672 } } }, './path/to/configuration.json' );
var port = cfg.rabbit.broker.port; // etc.
The original version of configya
used a get
method to retrieve configuration values with the ability to specify a default/fallback if the key were missing. This is technically still supported, but we think the new approach (nested keys) is nicer. Here's an example of the original API:
var config = require( 'configya' )( './path/config.json' );
// get the value from the config file, if an
// environment variable is present the environment
// variable ALWAYS trumps the file setting unless
// you have deploy-type=DEV in your env settings
config.get( 'key' );
config.get( 'key', defaultValue );
FAQs
Config files that defer to env settings.
The npm package configya receives a total of 354 weekly downloads. As such, configya popularity was classified as not popular.
We found that configya demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.