Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
|PyPI version| |Build Status|
A very simple and lightweight configuration loader and parser for Python.
Supports:
*.ini
)*.json
)*.yml
, *.yaml
)Installation ''''''''''''
Bare installation: ::
pip install conf
Installation with support for YAML: ::
pip install "conf[yaml]"
Usage '''''
Starting your app """""""""""""""""
Start your app with your configuration file:
::
python your_app.py --config your_config.yml
Or:
::
python your_app.py --config config_env_var
The --config
argument can be:
You are allowed to provide multiple configuration names (separated by a single space), in which case any setting of a former configuration file can be overwritten by a setting of a later configuration file (if the name of that setting is identical).
Once you have supplied your application with some configuration, you can fetch the settings of that configuration. There are three options of how to do that.
Fetching your setting (option 1) """"""""""""""""""""""""""""""""
Simply get your setting from the conf
module:
.. code:: python
import conf
your_setting = conf.your_setting
Fetching your setting (option 2) """""""""""""""""""""""""""""""" Import your setting directly:
.. code:: python
from conf import your_setting
Fetching your setting (option 3) """""""""""""""""""""""""""""""" You can provide a default value if you are not sure the setting will be present:
.. code:: python
import conf
your_setting = conf.get('your_setting', 'your default value')
Note: If you use an ArgumentParser in your own application for other purposes, you must use the parse_known_args()
method of the parser.
Fetching your setting (option 4)
""""""""""""""""""""""""""""""""
You can get the configuration as a dictionary and get your setting as you would get any value from a dict
:
.. code:: python
import conf
conf_dict = conf.asdict()
your_setting = conf_dict.get('your_setting', 'your default value')
Meta
''''
This lib was designed and written in 2018 by finetuned89 <https://github.com/finetuned89>
_ and ramonhagenaars <https://github.com/ramonhagenaars>
_.
.. |PyPI version| image:: https://badge.fury.io/py/conf.svg :target: https://badge.fury.io/py/conf
.. |Build Status| image:: https://api.travis-ci.org/ramonhagenaars/conf.svg?branch=master :target: https://travis-ci.org/ramonhagenaars/conf
FAQs
Facilitates a convenient use of configuration files
We found that conf demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.