
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
Package, that allows you to encrypt, decrypt, convert your .json to .env file
.json with unique generated key.json file.json file with variables to .env.json file from URL to .env$ npm install envcoder
or if you use yarn:
$ yarn add envcoder
Encrypt your local .json file:
$ envcoder encrypt example.json
Decrypt your local .json file:
$ envcoder decrypt example-pub.json example.key
Decrypt your local .json file:
$ envcoder env -f example-pub.json -s example.key
Decrypt your remote .json file by URL:
$ envcoder env -u https://example.com/file/example-pub.json -s example.key
Also, you can add variable ENV_SECRET_KEY in your env, then package will prioritize it
Convert and build your local .json file to .env:
$ envcoder json -f example-pub.json
Convert and build your remote .json file to .env:
$ envcoder json -u https://example.com/file/example-pub.json
First, you need .json file with your variables in the root of your project.
Example file: example.json
{
"node": {
"env": "development"
},
"mongo": {
"host1": "127.0.0.1",
"port1": "8000",
"replica": false,
"user": "user",
"password": "password",
"database": "example_db",
"root": {
"user": "root",
"password": "root"
}
}
}
Now, you can encrypt your data using following command:
$ envcoder encrypt example.json
You will get 2 files: example-pub.json which contains your encrypted data and example.key, which contains generated key to decrypt your data
To decrypt, simply run the following command:
$ envcoder decrypt example-pub.json example.key
You can decrypt your data and convert it to .env with following command:
$ envcoder env -f example-pub.json -s example.key
This will build you .env file, that looks like this:
NODE_ENV=development
MONGO_HOST1=127.0.0.1
MONGO_PORT1=8000
MONGO_USER=user
MONGO_PASSWORD=password
MONGO_DATABASE=example_db
MONGO_ROOT_USER=root
MONGO_ROOT_PASSWORD=root
EnvCoder is MIT licensed
FAQs
Package, that allows you to encrypt, decrypt, convert your .json to .env file
The npm package envcoder receives a total of 11 weekly downloads. As such, envcoder popularity was classified as not popular.
We found that envcoder demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.