
Security News
npm Introduces minimumReleaseAge and Bulk OIDC Configuration
npm rolls out a package release cooldown and scalable trusted publishing updates as ecosystem adoption of install safeguards grows.
A sweet multi-layered configuration framework.
Configuration usually starts out fairly simple. Just a config file, some JSON describing a handful of settings. As your application or framework grows, the configuration grows.
Eventually you want to break the configuration up into multiple files. And have configuration vary depending on your environment. Or the current user. Or the local machine. And that new guy runs on Windows, so the files need to be stored in a different directory.
What was simple is no longer. Parfait is here to help!
Parfait can parse both JSON and YAML configuration files. JSON files
are first minified, so that they can contain comments. Parfait can
also read configuration from the user config (~/.config/${appName}
on Unixes) and site config (/etc/${appName} on Unixes), and properly
merge these configurations with the default configuration specified in
the application itself.
Parfait.js is hosted on NPM, so you can simply install it, and add
it to your package.json as a dependency.
$ npm install --save parfait
In your application, simply invoke parfait.configure(). Its default
conventions are fairly reasonable, but you can override them if you
need to.
var parfait = require('parfait');
var config = parfait.configure({
// environment can be provided here, or by NODE_ENV.
//environment: process.env.NODE_ENV || 'development',
// The configuration directory may also be specified
//directory: 'config'
// Optionally, a hard-coded base config can be provided as a
// starting point.
config: {
parfait: {
// If specified, user and site config can be processed on Unixes
'appName': 'SuperApp',
// If specified, user and site config can be processed on Windows
'appAuthor': 'Acme'
}
},
});
Parfait parses the configuration files in the specified directory, and
builds a POJO model that directly maps to the files and file
structure. For example, If the file foo.json contains { "bar": "bang" }, then the config object will look like:
{
foo: {
bar: 'bang'
}
}
Once one directory is scanned, Parfait will scan the next, overlaying the new settings on top of the prior settings.
Configuration is processed starting with the most general configuration, overlaying it with the more specific configurations.
configure()${config} directory${config}/${environment}.env directoryIf appName (and appAuthor on Windows) is set:
${siteConfig} directory${siteConfig}/${environment}.env directory${userConfig} directory${userConfig}/${environment}.env directoryThe tests in the test directory actually do a fairly good job showing an example configuration, and what the expected output from that configuration should be.
# Append 'bar' to the array 'foo'
"foo+": "bar"
# Append 'bar', 'bam', 'bang' to the array 'foo'
"foo+": [ "bar", "bam", "bang" ]
# Prepend 'bar' to the array 'foo'
"+foo": "bar"
# Discard 'foo' and replace with empty object
"foo=": {}
# Discard 'foo' and replace with given object
"foo=": { "bar": 3.14159 }
# Remove 'foo'
"foo-": null
FAQs
A sweet multi-layered configuration framework
We found that parfait demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
npm rolls out a package release cooldown and scalable trusted publishing updates as ecosystem adoption of install safeguards grows.

Security News
AI agents are writing more code than ever, and that's creating new supply chain risks. Feross joins the Risky Business Podcast to break down what that means for open source security.

Research
/Security News
Socket uncovered four malicious NuGet packages targeting ASP.NET apps, using a typosquatted dropper and localhost proxy to steal Identity data and backdoor apps.