Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
dotenv-config-cli
Advanced tools
A dot env config generator. Reads your .env file and generates a config file. Supports TypeScript and JavaScript.
The dotenv-config CLI is a command-line tool that simplifies the process of generating a config file based on your .env
file, supporting both TypeScript and JavaScript.
You can install dotenv-config globally using npm:
npm install -g dotenv-config
To use dotenv-config, run the following command:
dotenv-config generate
# There are the prompts you will see
? Specify the path to your .env file. The default location is the root directory ('.env'). › .env
? Specify the configuration file path. Default location is 'config/index.ts' or '.js' in the root directory. If specified, the file will be 'config.ts' or '.js' in the specified directory. › config
? Is this a TypeScript project? › (Y/n)
Note: When specifying the path to your configuration file, you have two options:
If you do not provide a path, the configuration file will be located at 'config/index.ts' or '.js' in the root directory of your project.
If you provide a path, the specified directory will be used, and the configuration file will be named 'config.ts' or '.js' within that specified directory.
This note provides additional clarification on how the configuration file path works based on your previous instruction.
The CLI will read your .env
file and generate a config file with environment variables.
After running the command, the CLI will generate a config
in the root or in the folder you specified.
note:
PRIVATE_KEY=your_private_key_here
SEPOLIA_RPC_URL=https://example.com/rpc
COINMARKETCAP_API_KEY=your_api_key
ETHERSCAN_API_KEY=your_etherscan_api_key
export const envConfig = {
PRIVATE_KEY: process.env.PRIVATE_KEY,
SEPOLIA_RPC_URL: process.env.SEPOLIA_RPC_URL,
COINMARKETCAP_API_KEY: process.env.COINMARKETCAP_API_KEY,
ETHERSCAN_API_KEY: process.env.ETHERSCAN_API_KEY,
}
This project is licensed under the MIT License. See the LICENSE file for details.
Contributions are welcome! If you have ideas for improvements or encounter issues, please open an issue or submit a pull request.
Fork the Repository: Click the "Fork" button on the GitHub page to create your copy of the project.
Clone Your Fork: In your terminal, run the following command, replacing [your-username]
with your GitHub username:
git clone https://github.com/[your-username]/dotenv-config-generator.git
Install Dependencies:
npm install
Make Changes: Create a new branch for your changes, make improvements or fixes, and commit your work:
git checkout -b my-fix
# or
git switch -c my-fix
Run the Project:
Run the following command to make sure the project is running properly:
dotenv-config generate
Add Tests (if necessary) and Run Them:
npm run test
Push Your Changes to GitHub: Commit your changes and push them to GitHub. Then, open a pull request against the main
branch.
git add .
git commit -m "Fix: Describe your fix or feature"
FAQs
A dot env config generator. Reads your .env file and generates a config file. Supports TypeScript and JavaScript.
The npm package dotenv-config-cli receives a total of 0 weekly downloads. As such, dotenv-config-cli popularity was classified as not popular.
We found that dotenv-config-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.