
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
user-settings-dir
Advanced tools
Gets the directory to use for application settings for a user on different operating systems
user-settings-dir is a small library to find the directory to persist application settings for a user. Many node-ish applications store settings properly on *nixy OSes using a dotfile (or dotdirectory) in the user's home folder. On Windows however, they tend to store files incorrectly, in the user's home directory, rather than in appdata. The officially sanctioned place in windows is in %APPDATA%,
On Vista and newer, by default they evaluate like this:
%USERPROFILE%
(wrong): C:\Users\{UserName}\
%APPDATA%
(right): C:\Users\{UserName}\AppData\Roaming
On XP:
%USERPROFILE%
(wrong): C:\Documents and Settings\{UserName}\
%APPDATA%
(right): C:\Documents and Settings\{UserName}\Application Data\
In addition to being formally correct (and necessary if you ever want to get something Microsoft certified), this is just cleaner. I'm a neat-freak, and I like to keep my directories clean. Much as you hide settings in dotfiles in *nixy systems, those settings are meant to be hidden in AppData on windows systems. I'm hoping that making this module available might help prod at least a few people in the right direction, when making cross platform node applications.
This module was based off of https://github.com/sindresorhus/user-home so thank him, really.
FAQs
Gets the directory to use for application settings for a user on different operating systems
The npm package user-settings-dir receives a total of 94 weekly downloads. As such, user-settings-dir popularity was classified as not popular.
We found that user-settings-dir demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.