dmno-dev/varlock

Health v2 · maintenance only

Adoption not part of the score

4220 stars · 112 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Varlock is a CLI tool and library for managing environment variables and secrets via a typed .env.schema file, serving as a drop-in dotenv replacement. It gives AI agents schema context without exposing secret values, and adds validation, encryption, leak scanning, and log redaction.

Use cases

• validate and type-check environment variables in a project
• replace dotenv with a schema-driven env loader
• prevent AI coding agents from reading secret values
• scan repos and code for leaked secrets
• load secrets from 1Password, AWS, Vault, or Infisical into env vars
• manage multi-environment .env files with local overrides
• redact sensitive values from logs at runtime

When to choose

• you want a single source of truth for env config instead of .env.example
• you use AI coding assistants and worry about secrets leaking to their servers
• you need validation, coercion, and IntelliSense for env vars
• you want encrypted local overrides and secret provider plugins

When to avoid

• you need a fully managed cloud secrets platform rather than a local-first tool
• your project is locked into plain dotenv with no room for tooling changes
• you require non-JS runtimes without using varlock run or generated modules

Facets

cli-tool · maturity active

configuration-management secrets-management security form-handling cli developer-tools developer-tools security backend web-development self-hosted cli cross-platform windows dotenv env-vars env-schema ai-safe-config secret-management leak-detection log-redaction type-safety 1password vault mcp devops nodejs macos linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dmno-dev/varlock")