{"_id":"@asdsadw12312dwd2112xz/env-audit-cli","name":"@asdsadw12312dwd2112xz/env-audit-cli","dist-tags":{"latest":"1.0.0"},"versions":{"1.0.0":{"name":"@asdsadw12312dwd2112xz/env-audit-cli","version":"1.0.0","description":"Audit .env files for security issues","type":"module","bin":{"env-audit-cli":"dist/index.js"},"scripts":{"build":"tsup","dev":"tsup --watch","prepublishOnly":"npm run build"},"dependencies":{"chalk":"^5.3.0","commander":"^12.1.0"},"devDependencies":{"@types/node":"^20.11.0","tsup":"^8.0.2","typescript":"^5.3.3"},"engines":{"node":">=18"},"keywords":["env","security","audit","dotenv","secrets"],"license":"MIT","gitHead":"d05cafa734fc70acb2ebf16212824ed76ed54702","_id":"@asdsadw12312dwd2112xz/env-audit-cli@1.0.0","_nodeVersion":"25.9.0","_npmVersion":"11.12.1","dist":{"integrity":"sha512-H4Kil+Wb2DPCVhp63+sn0Pb2rSk2qBnwl1d0Tu7TGrXz8OlthiWBiW/pHKttmzbas1Q2+54ZGyIM6lX6su0HLQ==","shasum":"e34d0477e11fb2fcec66719bd4c186ef61a5eff3","tarball":"https://registry.npmjs.org/@asdsadw12312dwd2112xz/env-audit-cli/-/env-audit-cli-1.0.0.tgz","fileCount":10,"unpackedSize":30891,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIDi3Q16S4Mx+Dzdy8KzOcWjg6jfHtOizw5q4WSw9c+roAiEApg8uHeiJ2oDyq1e9Ss14UyuObj2PU5vAyCt8ztwEiBI="}]},"_npmUser":{"name":"asdsadw12312dwd2112xz","email":"okirmio@gmail.com"},"directories":{},"maintainers":[{"name":"asdsadw12312dwd2112xz","email":"okirmio@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/env-audit-cli_1.0.0_1775436266192_0.4353963909751648"},"_hasShrinkwrap":false}},"time":{"created":"2026-04-06T00:44:26.087Z","1.0.0":"2026-04-06T00:44:26.327Z","modified":"2026-04-06T00:44:26.535Z"},"maintainers":[{"name":"asdsadw12312dwd2112xz","email":"okirmio@gmail.com"}],"description":"Audit .env files for security issues","keywords":["env","security","audit","dotenv","secrets"],"license":"MIT","readme":"# env-audit-cli\n\nA fast, CI-friendly CLI tool that audits `.env` files for exposed secrets and security issues.\n\n## Features\n\n- 🔑 Detects AWS keys, GitHub tokens, Stripe keys, Slack tokens, SendGrid, Twilio, JWT secrets, database URLs with passwords, and more\n- 🚦 Severity levels: **critical**, **warning**, **info**\n- 🔒 Checks whether `.env` files are listed in `.gitignore`\n- 💡 Suggests actionable fixes for every issue\n- 📄 Supports multiple env files (`.env`, `.env.local`, `.env.production`, etc.)\n- 🖥️ Color-coded human-readable output\n- 📋 `--json` flag for machine-readable output\n- ❌ Exits with code `1` when critical issues are found (CI-friendly)\n\n## Installation\n\n```bash\nnpm install -g env-audit-cli\n# or run without installing\nnpx env-audit-cli\n```\n\n## Usage\n\n```bash\n# Scan default env files (.env, .env.local, .env.production, .env.development, .env.staging)\nenv-audit-cli\n\n# Scan specific files\nenv-audit-cli .env .env.production\n\n# JSON output (for CI pipelines / jq processing)\nenv-audit-cli --json\n\n# Disable color (useful in CI logs)\nenv-audit-cli --no-color\n```\n\n## Example Output\n\n```\n🔍 env-audit-cli — Security Audit\n\n📄 .env\n  ✔ Found in .gitignore\n  ✖ [CRITICAL] line 4 — AWS Access Key ID detected\n     Key:   AWS_ACCESS_KEY_ID\n     Value: AKIA****\n     Fix:   Rotate this AWS key immediately. Use IAM roles or secrets managers.\n\n  ⚠ [WARNING] line 7 — JWT secret with weak or exposed value\n     Key:   JWT_SECRET\n     Value: mysec****\n     Fix:   Ensure the JWT secret is at least 256 bits (32 random bytes). Rotate and store securely.\n\n──────────────────────────────────────────────────\nSummary\n  ✖ Critical: 1  ⚠ Warnings: 1  ℹ Info: 0\n  Total issues: 2\n\n❌ Critical issues found — exiting with code 1\n```\n\n## Rules\n\n| Rule ID | Description | Severity |\n|---|---|---|\n| `aws-access-key` | AWS Access Key ID | critical |\n| `aws-secret-key` | AWS Secret Access Key | critical |\n| `github-token` | GitHub PAT / OAuth token | critical |\n| `private-key-pem` | PEM private key block | critical |\n| `database-url-with-password` | DB URL with embedded password | critical |\n| `slack-token` | Slack API token | critical |\n| `stripe-key` | Stripe secret key | critical |\n| `sendgrid-key` | SendGrid API key | critical |\n| `twilio-key` | Twilio Account SID / Auth Token | critical |\n| `generic-api-key` | Generic API key with real-looking value | warning |\n| `jwt-secret` | JWT secret | warning |\n| `postgres-password` | PostgreSQL password variable | warning |\n| `mysql-password` | MySQL password variable | warning |\n| `generic-password` | Generic password variable | warning |\n| `placeholder-not-set` | Value is an obvious placeholder | info |\n| `empty-secret` | Secret variable has an empty value | info |\n\n## Exit Codes\n\n| Code | Meaning |\n|---|---|\n| `0` | No issues, or only warnings/info |\n| `1` | One or more critical issues found |\n\n## CI Integration\n\n```yaml\n# GitHub Actions example\n- name: Audit .env files\n  run: npx env-audit-cli --no-color\n```\n\n```bash\n# Pre-commit hook\nenv-audit-cli .env || exit 1\n```\n\n## License\n\nMIT\n","readmeFilename":"README.md","_rev":"1-334157d99d2093c2d4520ed33f10667e"}