Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
global-config-file
Advanced tools
global-config-file
)Handles all extensions for configuration files.
$ yarn add global-config-file
# npm users
$ npm install global-config-file
This package exports one function that accepts a filename and an options object.
The file provided must be the one with no extension.
import globalConfigFile from "global-config-file";
const config = globalConfigFile(".examplerc");
If the option quiet
is set to false
, the package might throw an error if:
In that case you can simply handle it with a try..catch
.
import globalConfigFile from "global-config-file";
let config;
try {
config = globalConfigFile(".examplerc");
} catch (error) {
console.error(error);
}
Otherwise, if quite
is on true
, it will just return undefined
.
The function will look for all the possible files, in the order given in the options.
So, for the .examplerc
name, it will look for:
.examplerc
(JSON and YML format are supported).examplerc.js
example.config.js
(note that the dot and rc
got removed).examplerc.json
.examplerc.yml
.examplerc.yaml
package.json
(for a example
property)Option | Type | Description | Default value |
---|---|---|---|
extensions | Object | All the file extensions that are enabled. | {empty: true, js: true, "config.js": true, json: true, yml: true, yaml: true, package: true } |
errors | Object | The error messages thrown by the program. | {noConfigFound: "No configuration file found", noExtensions: "No extensions were found or enabled" } |
root | string | Where to look for the configuration files. | process.cwd() |
quiet | boolean | If set to true, the program will return undefined instead of throwing Errors. | false |
Feel free to dive in! Open an issue or submit PRs.
On this project we follow the Contributor Covenant Code of Conduct.
This project follows the Angular commit messages, but it's very open to emojis 🤯.
MIT @ Alessandro Canessa
FAQs
Handles all extensions for configuration files.
The npm package global-config-file receives a total of 1 weekly downloads. As such, global-config-file popularity was classified as not popular.
We found that global-config-file demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.