conf 6.2.3

Simple config handling for your app or module

conf@6.2.3 was published on 2020-04-05. Its manifest declares 10 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=8.

All conf versions · Permanent reference to 6.2.3 · Latest release

Package specifications

Version	6.2.3
License declaration	MIT
Published	2020-04-05T09:52:28.556Z
Node.js requirement	>=8
Type declarations	Not declared
Runtime dependency count	10
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	35.71 KiB
Published file count	5
Package type	Not declared
ES module entry	Not declared
Default entry	Not declared
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	27
Repository stars	1351
Repository forks	139

Install conf 6.2.3

npm install conf@6.2.3
pnpm add conf@6.2.3
yarn add conf@6.2.3

Runtime dependencies

ajv ^6.10.2
pkg-up ^3.0.1
semver ^6.2.0
onetime ^5.1.0
dot-prop ^5.0.0
make-dir ^3.0.0
env-paths ^2.2.0
debounce-fn ^3.0.1
json-schema-typed ^7.0.1
write-file-atomic ^3.0.0

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

ajv@6.15.0 — direct
debounce-fn@3.0.1 — direct
dot-prop@5.3.0 — direct
env-paths@2.2.1 — direct
fast-deep-equal@3.1.3 — indirect
fast-json-stable-stringify@2.1.0 — indirect
find-up@3.0.0 — indirect
imurmurhash@0.1.4 — indirect
is-obj@2.0.0 — indirect
is-typedarray@1.0.0 — indirect
json-schema-traverse@0.4.1 — indirect
json-schema-typed@7.0.3 — direct
locate-path@3.0.0 — indirect
make-dir@3.1.0 — direct
mimic-fn@2.1.0 — indirect
onetime@5.1.2 — direct
p-limit@2.3.0 — indirect
p-locate@3.0.0 — indirect
p-try@2.2.0 — indirect
path-exists@3.0.0 — indirect
pkg-up@3.1.0 — direct
punycode@2.3.1 — indirect
semver@6.3.1 — direct
signal-exit@3.0.7 — indirect
typedarray-to-buffer@3.1.5 — indirect
uri-js@4.4.1 — indirect
write-file-atomic@3.0.3 — direct

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Binary-Artifacts	10/10 — no binaries found in the repo
Maintained	0/10 — 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Code-Review	0/10 — Found 0/30 approved changesets -- score normalized to 0
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Security-Policy	9/10 — security policy file detected
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
SAST	0/10 — no SAST tool detected
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
Branch-Protection	0/10 — branch protection not enabled on development/release branches

Evidence and freshness

https://registry.npmjs.org/conf/6.2.3 — retrieved 2026-10-29T11:37:01.890Z
https://api.deps.dev/v3/projects/github.com%2Fsindresorhus%2Fconf — retrieved 2026-10-29T08:19:34.416Z
https://api.deps.dev/v3/systems/npm/packages/conf/versions/6.2.3 — retrieved 2026-10-29T11:37:02.440Z
https://api.deps.dev/v3/systems/npm/packages/conf/versions/6.2.3:dependencies — retrieved 2026-10-29T11:37:02.455Z