+8
-1
@@ -5,4 +5,11 @@ # Changelog | ||
| ## [Unreleased](https://github.com/motdotla/dotenv/compare/v17.2.3...master) | ||
| ## [Unreleased](https://github.com/motdotla/dotenv/compare/v17.2.4...master) | ||
| ## [17.2.4](https://github.com/motdotla/dotenv/compare/v17.2.3...v17.2.4) (2026-02-05) | ||
| ### Changed | ||
| * Make `DotenvPopulateInput` accept `NodeJS.ProcessEnv` type ([#915](https://github.com/motdotla/dotenv/pull/915)) | ||
| - Give back to dotenv by checking out my newest project [vestauth](https://github.com/vestauth/vestauth). It is auth for agents. Thank you for using my software. | ||
| ## [17.2.3](https://github.com/motdotla/dotenv/compare/v17.2.2...v17.2.3) (2025-09-29) | ||
@@ -9,0 +16,0 @@ |
+1
-1
@@ -127,3 +127,3 @@ // TypeScript Version: 3.0 | ||
| export interface DotenvPopulateInput { | ||
| [name: string]: string; | ||
| [name: string]: string | undefined; | ||
| } | ||
@@ -130,0 +130,0 @@ |
+1
-1
| { | ||
| "name": "dotenv", | ||
| "version": "17.2.3", | ||
| "version": "17.2.4", | ||
| "description": "Loads environment variables from .env file", | ||
@@ -5,0 +5,0 @@ "main": "lib/main.js", |
+1
-14
| <div align="center"> | ||
| π announcing <a href="https://github.com/dotenvx/dotenvx">dotenvx</a>. <em>run anywhere, multi-environment, encrypted envs</em>. | ||
| π new announcement <em><a href="https://github.com/vestauth/vestauth">vestauth: auth for agents</a></em>βfrom the creator of <a href="https://github.com/motdotla/dotenv"><code>dotenv</code></a> and <a href="https://github.com/dotenvx/dotenvx"><code>dotenvx</code></a>. | ||
| </div> | ||
@@ -7,15 +7,2 @@ | ||
| <div align="center"> | ||
| **Special thanks to [our sponsors](https://github.com/sponsors/motdotla)** | ||
| <a href="https://tuple.app/dotenv"> | ||
| <div> | ||
| <img src="https://res.cloudinary.com/dotenv-org/image/upload/w_1000,ar_16:9,c_fill,g_auto,e_sharpen/v1756831704/github_repo_sponsorship_gq4hvx.png" width="600" alt="Tuple"> | ||
| </div> | ||
| <b>Tuple, the premier screen sharing app for developers on macOS and Windows.</b> | ||
| </a> | ||
| <hr> | ||
| </div> | ||
| # dotenv [](https://www.npmjs.com/package/dotenv) | ||
@@ -22,0 +9,0 @@ |
+1
-16
| <div align="center"> | ||
| π announcing <a href="https://github.com/dotenvx/dotenvx">dotenvx</a>. <em>run anywhere, multi-environment, encrypted envs</em>. | ||
| π new announcement <em><a href="https://github.com/vestauth/vestauth">vestauth: auth for agents</a></em>βfrom the creator of <a href="https://github.com/motdotla/dotenv"><code>dotenv</code></a> and <a href="https://github.com/dotenvx/dotenvx"><code>dotenvx</code></a>. | ||
| </div> | ||
@@ -7,15 +7,2 @@ | ||
| <div align="center"> | ||
| **Special thanks to [our sponsors](https://github.com/sponsors/motdotla)** | ||
| <a href="https://tuple.app/dotenv"> | ||
| <div> | ||
| <img src="https://res.cloudinary.com/dotenv-org/image/upload/w_1000,ar_16:9,c_fill,g_auto,e_sharpen/v1756831704/github_repo_sponsorship_gq4hvx.png" width="600" alt="Tuple"> | ||
| </div> | ||
| <b>Tuple, the premier screen sharing app for developers on macOS and Windows.</b> | ||
| </a> | ||
| <hr> | ||
| </div> | ||
| # dotenv [](https://www.npmjs.com/package/dotenv) | ||
@@ -61,6 +48,4 @@ | ||
| <a href="https://www.youtube.com/watch?v=YtkZR0NFd1g"> | ||
| <div align="right"> | ||
| <img src="https://img.youtube.com/vi/YtkZR0NFd1g/hqdefault.jpg" alt="how to use dotenv video tutorial" align="right" width="330" /> | ||
| <img src="https://simpleicons.vercel.app/youtube/ff0000" alt="youtube/@dotenvorg" align="right" width="24" /> | ||
| </div> | ||
| </a> | ||
@@ -67,0 +52,0 @@ |
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 10 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 10 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
82190
-0.26%678
-2.16%