dmno-dev/varlock
AI-safe .env files: Schemas for agents, Secrets for humans.
Build with Backblaze B2
SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.
Loading star history...
Where it stands
Rank, growth pace and release cadence relative to everything GStars tracks.
5 releases in the last 90 days, the latest 12 days ago, with 49 contributors on GitHub.
Gained 94% more stars in the last 90 days than in the 90 days before.
Use Cases & Benefits
- Provides AI-safe environment variable management with schema validation, secret protection, and multi-environment support for .env files.
- Ensures secrets are never exposed to AI agents by separating schema from sensitive values and includes proactive leak scanning and runtime leak prevention.
- Use for securely managing environment variables in TypeScript projects requiring strict type safety and validation with IntelliSense support.
- Use for integrating secret management from multiple providers like 1Password, AWS, Azure, GCP, and Bitwarden via flexible plugins.
- Use for automating environment variable validation and secret leak detection in CI/CD pipelines with git hooks and CLI tooling.
Should you depend on it?
License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.
License
MIT
Permissive: commercial use, modification and redistribution are allowed with attribution.
Community files
- README: present
- Contributing guide: present
- Code of conduct: present
Watch-outs
No watch-outs from GStars' checks.
General guidance from repository metadata, not legal advice. How we score
From the README
AI-safe .env files: Schemas for agents, Secrets for humans.
Unlike .env.example, your .env.schema is a single source of truth, built for collaboration, that will never be out of sync.
Flexible plugin system: adds new decorators, functions, types - enables secure declarative secret loading.
You can get started with varlock by installing the CLI:
See the full installation docs or the Docker guide for more information.
Validate your
.env.schemaand pretty print your environment variables with:If you need to pass resolved env vars into another process, you can run:
In many cases you can use our drop-in integrations for seamless experience - with additional security guardrails, like log redaction and leak prevention.
Daily snapshots
Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots
Forks
138+28
Open issues
80+35
Compared with peers in Security
Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth
| Repository | Stars | +7d | Health | Last release |
|---|---|---|---|---|
| cloudflare/security-audit-skill | 61.7K | +8.8K | 17 | — |
| KeygraphHQ/shannon | 51.2K | +1.1K | 32 | 8 days ago |
| vxcontrol/pentagi | 33.5K | +712 | 38 | 31 days ago |
| Asymptote-Labs/agent-beacon | 3.3K | +360 | 40 | today |
| caddyserver/caddy | 78.8K | +267 | 60 | 1 day ago |
| dmno-dev/varlock | 4.8K | — | 64 | 12 days ago |
| Category median | 51.2K | +712 | 38 | — |
Discover Repositories
Search across tracked repositories by name or description