Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Simple, pluggable, hierarchical configs
$ npm install flconf --save
If you have a config directory that looks like:
config
├── default.json
└── env
├── development.json
├── production.json
└── test.json
var config = require('flconf')(__dirname + '/config');
config.use('default');
config.use('env/' + process.env.NODE_ENV || 'development');
module.exports = config.load();
flconf will load default.json first, then it will load the config file for the appropriate NODE_ENV. You can specify as many layers of config as you like.
Config filenames can be globs as matched by minimatch.
var Config = require('flconf');
Creates a new Config instance. You must provide the dirname that flconf will use while loading config files.
You can omit the new
operator and simply invoke flconf with the dirname if you wish:
var config = require('flconf')(__dirname);
Adds file
as a layer in this config. file
should be the path to a config file without the .json
extension.
Adds a plugin to this config's plugin stack. Plugins are simply JSON.parse
reviver functions that modify the config in some way. See the plugins section for more details.
Loads all of the specified config files and returns the merged config object.
Replaces any bash-style environment variables with their actual values in the environment.
{
"user": "${LOGNAME}"
}
Will load as:
{
"user": "ruppel"
}
config.use(config.ms);
Replaces ms-style time strings with their value in milliseconds.
{
"maxAge": "1 day"
}
Will load as:
{
"maxAge": 86400000
}
This software is free to use under the MIT license. See the LICENSE file for license text and copyright information.
FAQs
Simple, pluggable, hierarchical configs
We found that flconf demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.