Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Simple, pluggable, hierarchical configs
$ npm install flconf --save
If you have a config directory that looks like:
config
├── default.json
└── env
├── development.json
├── production.json
└── test.json
var config = require('flconf')(__dirname + '/config');
config.use('default');
config.use('env/' + process.env.NODE_ENV || 'development');
module.exports = config.load();
flconf will load default.json first, then it will load the config file for the appropriate NODE_ENV. You can specify as many layers of config as you like.
Config filenames can be globs as matched by minimatch.
var Config = require('flconf');
Creates a new Config instance. You must provide the dirname that flconf will use while loading config files.
You can omit the new
operator and simply invoke flconf with the dirname if you wish:
var config = require('flconf')(__dirname);
Adds file
as a layer in this config. file
should be the path to a config file without the .json
extension.
Adds a plugin to this config's plugin stack. Plugins are simply JSON.parse
reviver functions that modify the config in some way. See the plugins section for more details.
Loads all of the specified config files and returns the merged config object.
Replaces any bash-style environment variables with their actual values in the environment.
{
"user": "${LOGNAME}"
}
Will load as:
{
"user": "ruppel"
}
config.use(config.ms);
Replaces ms-style time strings with their value in milliseconds.
{
"maxAge": "1 day"
}
Will load as:
{
"maxAge": 86400000
}
This software is free to use under the MIT license. See the LICENSE file for license text and copyright information.
FAQs
Simple, pluggable, hierarchical configs
The npm package flconf receives a total of 22 weekly downloads. As such, flconf popularity was classified as not popular.
We found that flconf demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.