
Security News
Open Source Maintainers Feeling the Weight of the EU’s Cyber Resilience Act
The EU Cyber Resilience Act is prompting compliance requests that open source maintainers may not be obligated or equipped to handle.
This is the application configuration helper module you've always dreamed of. It's goal is to be declaritive and environmental which makes for easier development and testing.
Basic Example
var Config = require('config')
var sampleConfig = new Config('path/to/configs/')
// will open path/to/configs/development.json
sampleConfig.get('real.setting.no1')
You can also specify a different environment
var sampleConfig = new Config('path/to/configs/', 'demo')
// will now open path/to/configs/demo.json
Strict mode
var sampleConfig = new Config('path/to/configs/', undefined, true)
sampleConfig.get('fake.setting')
// throws configuration setting missing error!
One of the main reasons I wrote Config
is because default configuration settings are annoying! The code that requires configuration should know ahead of time what to do. With Config
you can declare what the default should be, and it will fall back to it if your config.json doesn't say otherwise.
var foo = sampleConfig.get('non.existent.setting', 'I am a default')
console.log(foo)
// 'I am a default'
FAQs
Configuration Management
The npm package deconfig receives a total of 90 weekly downloads. As such, deconfig popularity was classified as not popular.
We found that deconfig demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The EU Cyber Resilience Act is prompting compliance requests that open source maintainers may not be obligated or equipped to handle.
Security News
Crates.io adds Trusted Publishing support, enabling secure GitHub Actions-based crate releases without long-lived API tokens.
Research
/Security News
Undocumented protestware found in 28 npm packages disrupts UI for Russian-language users visiting Russian and Belarusian domains.