EnvGuard — Environment Variable Validator

Catch missing values, hardcoded secrets, and misconfigurations in your .env files before they cause production incidents.

Install

npm install -g kryptorious-envguard

Usage

# Scan a .env file for issues
envguard scan .env

# Check for missing required variables
envguard check .env --required DATABASE_URL,API_KEY,SECRET_KEY

# Audit all .env files in a directory
envguard audit ./projects

# Generate a .env.example from your .env
envguard generate .env --output .env.example

What It Catches

• Missing values — KEY= with no value
• Hardcoded secrets — passwords, tokens, API keys in plain sight
• Inconsistencies — variables in one .env but not .env.example
• Duplicates — same key defined twice
• Unused variables — defined but never referenced in code
• Formatting issues — spaces around =, Windows line endings

Example Output

$ envguard scan .env

.env — 3 issues found

⚠  DATABASE_URL: empty value (line 12)
⚠  PASSWORD: looks like a hardcoded secret (line 24)
⚠  PORT: 8000 (line 5) not in .env.example

3 issues, 0 errors. Run `envguard fix .env` to auto-resolve.

Premium

Upgrade to Premium ($9 lifetime) for:

• Custom validation rules and regex patterns
• CI/CD integration (GitHub Actions, GitLab CI)
• Slack/Discord alerts on secret detection
• Team-wide .env policy enforcement
• Historical audit dashboard

Get Premium — $9 Lifetime

License

MIT — free for personal and commercial use.

Built by Kryptorious Quantum Biosciences.