Security News
Weekly Downloads Now Available in npm Package Search Results
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Infisical is a simple, end-to-end encrypted secrets manager for your .env files. It enables teams to securely sync and manage .env files in seconds.
Infisical combines simplicity with security. With git-like commands and end-to-end encryption, Infisical is easy to use and super secure — no one (not even us) can read your dearest secrets.
Head over to https://infisical.com/ to make an account and shared workspace for your team.
Login via CLI:
npx infisical login
Connect the folder containing your .env file to the workspace:
npx infisical connect [workspace id]
Push your .env file to the workspace:
npx infisical push [environment]
Pull the latest .env file from the workspace:
npx infisical pull [environment]
Note that the environment argument for the push/pull commands accepts 3 possible inputs: dev, staging, and prod
npx infisical login
npx infisical connect 12345a6b12354872f789101d1
npx infisical push dev
npx infisical pull dev
Voila!
Infisical uses end-to-end encryption to securely store and share secrets. It uses secure remote password (SRP) to handle authentication and public-key cryptography for secret sharing and syncing; your secrets are symmetrically encrypted at rest by keys decryptable-only by intended parties in your team. Put simply, rest-assured we've put measures in place so that secrets remain your-eyes-only - all while making minimal user-experience trade-offs.
For a fuller discussion on how it works, head to our website: https://infisical.com/
FAQs
Sync .env files simply, securely
The npm package infisical receives a total of 35 weekly downloads. As such, infisical popularity was classified as not popular.
We found that infisical demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Security News
A Stanford study reveals 9.5% of engineers contribute almost nothing, costing tech $90B annually, with remote work fueling the rise of "ghost engineers."
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.