Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
A library for incrementally build config objects through layering config files in many formats.
A library for incrementaly build config objects through layering config files in many formats. Check out the features:
Install with: npm i -P confort
In your code:
const Confort = require('confort');
// Constructor Forms
let conf = new Confort(); // Empty conf object
let conf = new Confort({ key: 'value', key2: 'value2' }); // Initial conf from objects
let conf = new Confort('./my-file.toml'); // Initial conf from file
// Adding incremental config layer
conf.addLayer({ key: 'value' });
conf.object; // => { key: 'value' }
conf.addLayer({ key: 'newValue', otherKey: 'value' });
conf.object; // => { key: 'newValue', otherKey: 'value' }
conf.addLayer('./my-file.yml');
// Reset the configuration for reuse
conf.clear();
// Reset the conf and reapply all layers effectively reading changes in files
conf.reload();
// Enable auto reload when changes in loaded conf files happen
conf.liveReload = true;
// Disables auto reload
conf.liveReload = false;
If you have found any problems with this module, please:
~bug
.We will make sure to take a look when time allows us.
If you wish to get that awesome feature or have some advice for us, please:
~proposal
.If you have spotted any enhancements to be made and is willing to get your hands dirty about it, fork us and submit your merge request so we can collaborate effectively.
[v0.1.3] - 2019-10-15
FAQs
A library for incrementally build config objects through layering config files in many formats.
The npm package confort receives a total of 575 weekly downloads. As such, confort popularity was classified as not popular.
We found that confort demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.