Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
cross-conf-env
Advanced tools
To cross-platform the config and root variable reference of package.json in npm-scripts.
To cross-platform the config
and root
variable reference of package.json in npm-scripts.
This npm is installed on npm-scripts only a so devDependencies
.
$ npm install --save--dev cross-conf-env
To the config
of package.json to set the value.
{
"name": "sample",
"version": "1.0.0",
"config": {
"app": "MyApp"
},
"scripts": {
"var": "cross-conf-env echo npm_package_config_app npm_package_version",
"var:bash": "cross-conf-env echo $npm_package_config_app $npm_package_version",
"var:win": "cross-conf-env echo %npm_package_config_app% %npm_package_version%",
"var:cross": "cross-conf-env echo npm_package_config app-npm_package_version",
"var:cross-multiple": "cross-conf-env echo npm_package_config_app-npm_package_version"
},
"devDependencies": {
"cross-conf-env": "^1.0.6"
}
}
Value of npm_package_config_
or npm_package_
will be executed after being replaced.
$ npm run var
MyApp 1.0.0
$ npm run var:bash
MyApp 1.0.0
$ npm run var:win
MyApp 1.0.0
$ npm run var:cross
MyApp 1.0.0
$ npm run var:cross-multiple
MyApp-1.0.0
The format of the environment variable in npm-scripts are different for each platform. OS X or Linux (bash) is $variable
, Windows (cmd.exe or PowerShell) is %variable%
.
It supports all of the format by using this npm in npm-scripts, format that support is below.
Platform | Format |
---|---|
OS X, Linux (bash) | $npm_package_ or $npm_package_config_ |
Windows (cmd.exe or PowerShell) | %npm_package_% or %npm_package_config_% |
cross-conf-env original | npm_package_ or npm_package_config_ , without special charactors ($ or % ) |
npm-scripts environment variable that has been expanded by the execution platform is used as it is. Otherwise, to expand the cross-conf-env
.
Definition of npm-scripts:
cross-conf-env command param1 param2 ...etc
cross-conf-env
converts the value specified in process.env
.
It will not work if run from pipe in npm-scripts.
{
"config": {
"app": "MyApp",
"test": "Test"
},
"scripts": {
"pipe": "cross-conf-env echo npm_package_config_var | cross-conf-env echo keep npm_package_config_test"
}
}
results:
$ npm run pipe
Test
echo: write: Broken pipe
If concatenating npm-scripts we recommend npm-run-all rather than pipe. If it is npm-run-all
can concatenate npm-scripts to cross platforms, and cross-conf-env
will work as well.
FAQs
To cross-platform the config and root variable reference of package.json in npm-scripts.
The npm package cross-conf-env receives a total of 2,395 weekly downloads. As such, cross-conf-env popularity was classified as popular.
We found that cross-conf-env demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.