npmpackage.info

@web/config-loader

Guides, tools and libraries for modern web development.

0.3.2

2,250

MIT

TypeScript

1.13 kB

10,476,529 4

Installations

npm install @web/config-loader

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS, ESM

Min. Node Version

>=18.0.0

Node Version

20.17.0

NPM Version

10.8.2 Score

99.7

Supply Chain

85.4

Quality

85.1

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

62

Total

1,962

Closed

287

Merged

1,613

Issues

Open

341

Total

840

Closed

499

Releases

1,865

@web/test-runner-saucelabs@0.13.0

Published on 31 Jan 2025

@web/test-runner-saucelabs@0.12.1

Published on 30 Jan 2025

@web/test-runner-saucelabs@0.12.0

Published on 27 Jan 2025

@web/test-runner-browserstack@0.8.0

Published on 27 Jan 2025

@web/test-runner-webdriver@0.9.0

Published on 27 Jan 2025

@web/storybook-builder@0.1.21

Published on 20 Jan 2025

View all 1,865 releases

Contributors

146

View all 146 contributors

Languages

TypeScript

JavaScript

HTML

MDX

CSS

TypeScript (56.57%)

JavaScript (41.06%)

HTML (2.32%)

MDX (0.04%)

Love this project? Help keep it running — sponsor us today! 🚀

Developer

modernweb-dev

Download Statistics

Total Downloads

10,476,529

Last Day

22,359

Last Week

22,359

Last Month

395,683

Last Year

4,909,775

GitHub Statistics

2,250 Stars

3,008 Commits

298 Forks

24 Watching

57 Branches

146 Contributors

Bundle Size

2.80 kB

Minified

1.13 kB

Minified + Gzipped

Bundlephobia

Maintainers

Package Meta Information

Latest Version

0.3.2

Package Id

@web/config-loader@0.3.2

Unpacked Size

10.82 kB

Size

3.67 kB

File Count

NPM Version

10.8.2

Node Version

20.17.0

Publised On

30 Aug 2024

Total Downloads

Cumulative downloads

Total Downloads

10,476,529

Last day

22,359

Compared to previous day

Last week

-71.5%

22,359

Compared to previous week

Last month

4.1%

395,683

Compared to previous month

Last year

81.9%

4,909,775

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Versions

Config Loader

Load user config files for node js projects. Supports loading config as es module or common js module, based on the user's node version, package type and file extension. Prints helpful error messages when invalid syntax combinations are used.

Follows node's logic for deciding how to load a file. .mjs files are loaded as es module, .cjs as common js. .js files are loaded based on the type field of the package.json.

Usage

1npm i --save-dev @web/config-loader

1import { readConfig, ConfigLoaderError } from '@web/config-loader';
2// Or as a commonjs module
3// const { readConfig, ConfigLoaderError } = require('@web/config-loader');
4
5(async () => {
6  try {
7    // will look for:
8    // process.cwd() + 'my-project.config.mjs'
9    // process.cwd() + 'my-project.config.cjs'
10    // process.cwd() + 'my-project.config.js'
11    const config = await readConfig('my-project.config');
12  } catch (error) {
13    if (error instanceof ConfigLoaderError) {
14      // If the error is a ConfigLoaderError it has a human readable error message
15      // there is no need to print the stack trace.
16      console.error(error.message);
17      return;
18    }
19    console.error(error);
20    return;
21  }
22})();

Custom config file

If you want to let users define a custom config file location, you can pass this as a second optional parameter.

1const { readConfig, ConfigLoaderError } = require('@web/config-loader');
2
3(async () => {
4  try {
5    const optionalCustomConfigFilePath = '...';
6    const config = await readConfig('my-project.config', optionalCustomConfigFilePath);
7  } catch (error) {
8    if (error instanceof ConfigLoaderError) {
9      // If the error is a ConfigLoaderError it has a human readable error message
10      // there is no need to print the stack trace.
11      console.error(error.message);
12      return;
13    }
14    console.error(error);
15    return;
16  }
17})();

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Maintained

Determines if the project is "actively maintained".

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

4

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 4

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/canary.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/canary.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/canary.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/canary.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/canary.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/canary.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/canary.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/canary.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-browser.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-browser.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-browser.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-browser.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-node.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-node.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-node.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-node.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/verify-node.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-node.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-node.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-node.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-node.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-node.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/verify-node.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-node.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-storybook-builder.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-storybook-builder.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-storybook-builder.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-storybook-builder.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-storybook-builder.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-storybook-builder.yml/master?enable=pin
Info: 0 out of 15 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 6 third-party GitHubAction dependencies pinned
Info: 7 out of 7 npmCommand dependencies pinned

3

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

0

Fuzzing

Determines if the project uses fuzzing.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

4

/10

Last Scanned on 2025-02-03

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to @web/config-loader

cargo-web-loader

0.1.4

In order to use this loader you need to install it by cloning this repository: ``` npm i --save cargo-web-loader ``` and then add it to your webpack config accordingly: ```javascript // Cargo web crate loader { test: /Cargo.toml$/, loaders: [

@iconduit/browserconfig-loader

0.2.0

A Webpack loader for browserconfig.xml files

create-new-webpack-app

1.1.0

CLI for scaffolding webpack projects using default config, framework templates, loader or plugins templates

hybridconfig

0.2.1

Runtime web application configuration loader utilizing hybrid approach: using external JSON config fetching but allowing use of environment variables to overwrite values in development environment.