
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
dotenv-wizard
Advanced tools
Interactive CLI to generate your .env file from a .env.example by prompting for values.
Interactive CLI to generate your .env file from a .env.example.
dotenv-wizard makes setting up environment variables for your project quick and painless. It reads your .env.example file, prompts you for each variable, and generates a ready-to-use .env file - perfect for onboarding new developers or configuring projects.
.env.example automatically.env.example.env fileYou can run it directly using npx:
npx dotenv-wizard
Or install globally:
npm install -g dotenv-wizard
dotenv-wizard
By default, dotenv-wizard looks for .env.example in the current directory and outputs a .env file:
npx dotenv-wizard
You can also specify custom paths:
npx dotenv-wizard --example path/to/.env.example --output path/to/.env
| Flag | Description | Default |
|---|---|---|
-e, --example <path> | Path to .env.example file | .env.example |
-o, --output <path> | Path for the generated .env file | .env |
Given a .env.example like:
DB_HOST=localhost
DB_USER=root
DB_PASS=
Running npx dotenv-wizard will prompt:
Enter value for DB_HOST: localhost
Enter value for DB_USER: admin
Enter value for DB_PASS: ****
And generate .env:
DB_HOST=localhost
DB_USER=admin
DB_PASS=secretpassword
Contributions are welcome! Feel free to open issues or submit pull requests.
MIT
FAQs
Interactive CLI to generate your .env file from a .env.example by prompting for values.
We found that dotenv-wizard demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.