← All work
TypeScript
envaudit
A zero-dependency CLI that audits environment variables across modern JS stacks: vars the code reads but nothing defines, dead vars, credentials committed to .env.example, and secret-looking names inlined into the client bundle.
envaudit
Highlights
- Scans process.env, import.meta.env, Deno.env, Bun.env, and destructuring
- Catches secrets behind NEXT_PUBLIC_ and VITE_ prefixes before they ship
- Reads .env files plus wrangler.toml and wrangler.jsonc vars
- Fix mode keeps .env.example in sync, 49 tests, zero runtime deps
Want the code?
View on GitHub