Security News
Weekly Downloads Now Available in npm Package Search Results
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Opinionated config library that allows you to have complex config and behaves according to Twelve Factor App rules
Opinionated config library that allows you to have complex config, and behaves according to "Twelve Factor App" rules.
Read Motivation section
So, it suits well for:
"confme" loads your config and replaces placeholders with environment variables. For environemnt loading it uses dotenv-defaults, so you can create ".env.defaults" file to set default values of environment variables. If you have placeholders for non set environment variables then "confme" will throw an error.
You can pass a path to a JSON/JSON5 file with LIVR rules as a second argument. In this case, it will use LIVR (with extra rules) to validate the config.
Load config
const confme = require("confme");
const config = confme(__dirname + "/config.json");
Load config with validation
const confme = require("confme");
const config = confme(
__dirname + "/config.json",
__dirname + "/config-schema.json"
);
Example config
Placeholders are optional
{
"listenPort": "{{PORT}}",
"apiPath": "https://{{DOMAIN}}:{{PORT}}/api/v1",
"staticUrl": "https://{{DOMAIN}}:{{PORT}}/static",
"mainPage": "https://{{DOMAIN}}:{{PORT}}",
"mail": {
"from": "MyApp",
"transport": "SMTP",
"auth": {
"user": "{{SMTP_USER}}",
"pass": "{{SMTP_PASS}}"
}
}
}
Example LIVR schema
See LIVR for details.
{
"listenPort": ["required", "positive_integer"],
"apiPath": ["required", "url"],
"staticUrl": ["required", "url"],
"mainPage": ["required", "url"],
"mail": ["required", {"nested_object": {
"from": ["required", "string"],
"transport": ["required", {"one_of": ["SMTP", "SENDMAIL"] }],
"auth": {"nested_object": {
"user": ["required", "string"],
"pass": ["required", "string"]
}}
}}]
}
You can play with it in livr playground
Full example in examples folder.
Try it with
node app.js
DOMAIN=myapp.com PORT=80 node app.js
PORT='AAA' node app.js
According to Twelve Factor App, your config should be passed in envrironment variables. If you are not familiar with ideas of "Twelve Factor App," you should definitely read it.
Having all config variables in env variables is very flexible. You can run your app with docker and without docker. Moreover, you can reuse the same builds across all environments. For example, you can build an image, test it on QA and then run the same image well-tested imaged on production.
But passing the conf in environment variables is not very convenient. So, there a popular library called dotenv which allows you to store environment variables in ".env" files. But you should not commit them and you should have a sample in repository (like ".env.sample" which will be copied to ".env" on deployments without docker).
You can use dotenv-defaults which allows you to have file ".env.defaults" with default values commited to your repository.
But in real life, if you have rather complex configs and you do not want to define all of the values in ENV, you want to use your config as a template and build final config based on this template. It is very common approach for ansible users. confme allows you to do that.
Moreover, confme allows you to define LIVR schema to validate configurations. It can be helpful if you have complex configs with a lot of options but I prefer to use validation schema even with small configs.
FAQs
Opinionated config library that allows you to have complex config and behaves according to Twelve Factor App rules
The npm package confme receives a total of 296 weekly downloads. As such, confme popularity was classified as not popular.
We found that confme demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Security News
A Stanford study reveals 9.5% of engineers contribute almost nothing, costing tech $90B annually, with remote work fueling the rise of "ghost engineers."
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.