
Security News
Node.js TSC Declines to Endorse Feature Bounty Program
The Node.js TSC opted not to endorse a feature bounty program, citing concerns about incentives, governance, and project neutrality.
envkey-webpack-plugin
Advanced tools
A webpack plugin that wraps EnvKey's Node.js library so you can easily inject allow-listed configuration into your browser apps.
All vars will be available on process.env
in the browser.
To make process.env.NODE_ENV
available, just add it to the permitted
allow-list (see below).
npm i envkey-webpack-plugin --save-dev
var webpack = require("webpack"),
EnvkeyWebpackPlugin = require("envkey-webpack-plugin");
module.exports = {
//...
plugins: [
new EnvkeyWebpackPlugin({
permitted: ["STRIPE_PUBLISHABLE_KEY", "PUSHER_APP_KEY", "NODE_ENV"], // required, specify allow-list of vars to pull from Envkey -- you can also include "NODE_ENV" to make that available
dotEnvFile: ".env", // optional, specify alternate dotenv file path like ".env.staging" -- file should include valid ENVKEY variable
define: { ANOTHER_VAR: "anotherVal" }, // optional, set additional vars on `process.env`
}),
],
//...
};
FAQs
Use envkey as a webpack plugin.
We found that envkey-webpack-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Node.js TSC opted not to endorse a feature bounty program, citing concerns about incentives, governance, and project neutrality.
Research
Security News
A look at the top trends in how threat actors are weaponizing open source packages to deliver malware and persist across the software supply chain.
Security News
ESLint now supports HTML linting with 48 new rules, expanding its language plugin system to cover more of the modern web development stack.