# dotenvx/dotenvx

a secure dotenv–from the creator of `dotenv`

Repository: https://github.com/dotenvx/dotenvx
Canonical: https://ross.abutalabs.com/products/dotenvx
Homepage: https://dotenvx.com
Language: JavaScript
License: BSD-3-Clause
License Family: permissive
Topics: dotenv, env, dotenvx, environment-variables, secrets, secret-management, end-to-end-encryption, secret-manager, security-tools, cli, curl, homebrew, winget, configuration-file, secrets-management
Last push: 2026-08-25T19:11:19+00:00

## Health v2 (maintenance only)
Score: 89/100 (v2, computed 2026-09-03T02:39:23.370411+00:00)
- activity 99, release rhythm 85, longevity 72
- inputs: {"age_days": 1020, "days_push": 8, "days_rel": 23, "gap_med": 1, "n_releases_24m": 198}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 5707, forks 153 (observed 2026-08-28T04:09:28.140850+00:00)

## What it is
Dotenvx is a secure, cross-platform CLI and SDK for managing .env files, adding encryption so secrets can be safely committed to git and decrypted at runtime. It extends dotenv with multi-environment support, runtime leak protection, log redaction, and integrations for many languages and coding agents.

## Use cases
- encrypt .env files so they can be safely committed to git
- inject environment variables into any command in any language
- redact secrets from AI coding agent output like Claude Code
- manage separate env files for development, staging, and production
- validate that required environment variables exist before running
- pull secrets from 1Password or Bitwarden into .env files
- prevent secret leaks in precommit hooks

## When to choose
- you want encrypted .env files committed to your repo instead of a separate secret manager
- you need one dotenv tool that works across many languages, frameworks, and platforms
- you run AI coding agents and need secrets redacted from logs and transcripts
- you manage multiple environments with per-environment encrypted env files

## When to avoid
- you need centralized secret management with RBAC, audit logs, and team access control (consider Vault or the paid Dotenvx Armor)
- you only need basic dotenv loading without encryption (plain dotenv is simpler)
- you need cloud-native secret rotation and dynamic secrets

## Facets
- artifact type: cli-tool
- maturity: active
- function: secrets-management, configuration-management, cryptography, cli, developer-tools
- domain: developer-tools, security
- platform: cross-platform, cli, windows
- tags: dotenv, environment-variables, env-encryption, secret-redaction, multi-environment, sdk, devops, command-line, macos, linux, nodejs, docker

## Member repositories
- dotenvx/dotenvx (main) score 89

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:28.140850+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:53:32.985854+00:00, confidence not recorded.
  - readme: https://github.com/dotenvx/dotenvx (fetched 2026-08-28T04:09:28.140850+00:00, sha 30afda27ee98)
  - homepage: https://dotenvx.com (fetched 2026-08-29T08:49:20.402133+00:00, sha 7ec624d44d85)
  - site_page: https://dotenvx.com/docs/introduction (fetched 2026-08-29T08:49:20.415334+00:00, sha 67bf83dd473f)
  - site_page: https://dotenvx.com/docs/cli (fetched 2026-08-29T08:49:20.417076+00:00, sha bc3404834787)
  - site_page: https://dotenvx.com/docs/sdk (fetched 2026-08-29T08:49:20.427666+00:00, sha 0a1580f3f81e)
  - site_page: https://dotenvx.com/docs/quickstarts (fetched 2026-08-29T08:49:20.429946+00:00, sha 3a028cbffcfb)
  - site_page: https://dotenvx.com/docs/cli-quickstart (fetched 2026-08-29T08:49:20.431893+00:00, sha daac97490ce9)
  - site_page: https://dotenvx.com/docs/claude (fetched 2026-08-29T08:49:20.433471+00:00, sha d44c1210204e)
  - site_page: https://dotenvx.com/pricing (fetched 2026-08-29T08:49:20.411314+00:00, sha b3b873f57e10)
  - site_page: https://dotenvx.com/changelog (fetched 2026-08-29T08:49:20.413546+00:00, sha 49985a57b5ac)
- Data as of 2026-08-30T08:39:29.467469+00:00.