dotenvx/dotenvx

Health v2 · maintenance only

Adoption not part of the score

5707 stars · 153 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Dotenvx is a secure, cross-platform CLI and SDK for managing .env files, adding encryption so secrets can be safely committed to git and decrypted at runtime. It extends dotenv with multi-environment support, runtime leak protection, log redaction, and integrations for many languages and coding agents.

Use cases

• encrypt .env files so they can be safely committed to git
• inject environment variables into any command in any language
• redact secrets from AI coding agent output like Claude Code
• manage separate env files for development, staging, and production
• validate that required environment variables exist before running
• pull secrets from 1Password or Bitwarden into .env files
• prevent secret leaks in precommit hooks

When to choose

• you want encrypted .env files committed to your repo instead of a separate secret manager
• you need one dotenv tool that works across many languages, frameworks, and platforms
• you run AI coding agents and need secrets redacted from logs and transcripts
• you manage multiple environments with per-environment encrypted env files

When to avoid

• you need centralized secret management with RBAC, audit logs, and team access control (consider Vault or the paid Dotenvx Armor)
• you only need basic dotenv loading without encryption (plain dotenv is simpler)
• you need cloud-native secret rotation and dynamic secrets

Facets

cli-tool · maturity active

secrets-management configuration-management cryptography cli developer-tools developer-tools security cross-platform cli windows dotenv environment-variables env-encryption secret-redaction multi-environment sdk devops command-line macos linux nodejs docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dotenvx/dotenvx")