@dotenvx/dotenvx-ops
Secrets for agents–from the creator of `dotenv` and `dotenvx`
51
Versions
See LICENSE
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
motdotenvmotdotla
Keywords
dotenvdotenvxopsarmorenv
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| install-scripts | install-script:postinstall | AI (install-scripts): Postinstall runs a local Node.js script (src/cli/postinstall.js) for CLI setup — standard pattern for this dotenvx ecosystem tool, no network fetch or obfuscation. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): env spread in clipboardy/macos.js is to pass LC_CTYPE=UTF-8 to a subprocess — standard locale handling for clipboard operations, not credential exfiltration. | ai | |
| semgrep | semgrep:hex-decode | AI (semgrep): Hex decoding in device.js is for ECIES cryptographic key handling — core to this secrets management package's legitimate functionality. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Base64 decoding in decryptValue.js is for decrypting ciphertext — core cryptographic operation for this secrets management package. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): child_process used in playwrightConnect.js to install Chromium via npx playwright install — standard Playwright setup pattern, not arbitrary code execution. | ai | |
| npm-metadata | bundled-binaries | AI (npm-metadata): Bundled binaries are xsel (Linux) and clipboard utilities (Windows) from clipboardy fallbacks — well-known clipboard access utilities, not backdoors. | ai |
Versions (showing 51 of 72)
| Version | Deps | Published |
|---|---|---|
| 0.56.1 | 16 / 7 | |
| 0.56.0 | 16 / 7 | |
| 0.55.1 | 16 / 7 | |
| 0.55.0 | 16 / 7 | |
| 0.54.4 | 16 / 7 | |
| 0.54.3 | 16 / 7 | |
| 0.54.2 | 16 / 7 | |
| 0.54.0 | 16 / 7 | |
| 0.53.2 | 16 / 7 | |
| 0.53.1 | 16 / 7 | |
| 0.53.0 | 16 / 7 | |
| 0.52.1 | 16 / 7 | |
| 0.52.0 | 16 / 7 | |
| 0.51.1 | 16 / 7 | |
| 0.51.0 | 16 / 7 | |
| 0.50.1 | 16 / 7 | |
| 0.50.0 | 16 / 7 | |
| 0.49.2 | 16 / 7 | |
| 0.49.1 | 16 / 7 | |
| 0.49.0 | 16 / 7 | |
| 0.48.3 | 16 / 7 | |
| 0.48.2 | 16 / 7 | |
| 0.48.1 | 16 / 7 | |
| 0.48.0 | 16 / 7 | |
| 0.47.0 | 16 / 7 | |
| 0.46.1 | 16 / 7 | |
| 0.46.0 | 16 / 7 | |
| 0.45.3 | 16 / 7 | |
| 0.45.2 | 16 / 7 | |
| 0.45.1 | 16 / 7 | |
| 0.45.0 | 16 / 7 | |
| 0.44.0 | 16 / 7 | |
| 0.43.0 | 16 / 7 | |
| 0.42.1 | 16 / 7 | |
| 0.42.0 | 16 / 7 | |
| 0.41.0 | 16 / 7 | |
| 0.40.0 | 16 / 7 | |
| 0.39.1 | 16 / 7 | |
| 0.39.0 | 16 / 7 | |
| 0.38.3 | 16 / 7 | |
| 0.38.2 | 16 / 7 | |
| 0.38.1 | 16 / 7 | |
| 0.38.0 | 16 / 7 | |
| 0.37.9 | 15 / 7 | |
| 0.37.8 | 15 / 7 | |
| 0.37.7 | 15 / 7 | |
| 0.37.6 | 15 / 6 | |
| 0.37.5 | 15 / 6 | |
| 0.37.4 | 14 / 6 | |
| 0.37.3 | 14 / 6 | |
| 0.37.2 | 14 / 6 |