
Security News
crates.io Ships Security Tab and Tightens Publishing Controls
crates.io adds a Security tab backed by RustSec advisories and narrows trusted publishing paths to reduce common CI publishing risks.
A tiny module to read config parameters for your node application. It's avaiable through npm:
npm install param
Param exposes a single function that finds a config parameter
// example.js
var param = require('param');
var port = param('app.port');
console.log(port);
The above example tells param to find the parameter app.port.
It does so by first looking at the command line arguments
node example.js --app.port 8080 # prints 8080
If present param will simply return that value.
Otherwise param will look for a configuration file specified by --config [filename] or your NODE_ENV env var.
If NODE_ENV=development it will look for a config file called config/development.json or config/development.js.
It will start looking for the config file in . If it doesn't exist it will try in .. until it reaches /.
{
"app": {
"port": 8888
}
}
Running the example again with the above file saved as config/development.json
node example.js # prints 8888
Happy configuring!
MIT
FAQs
param is a tiny module to read config parameters
The npm package param receives a total of 40 weekly downloads. As such, param popularity was classified as not popular.
We found that param demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
crates.io adds a Security tab backed by RustSec advisories and narrows trusted publishing paths to reduce common CI publishing risks.

Research
/Security News
A Chrome extension claiming to hide Amazon ads was found secretly hijacking affiliate links, replacing creators’ tags with its own without user consent.

Security News
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.