Envaudit

Environment files drift out of sync silently. Your .env.example starts accurate and slowly stops reflecting reality: variables added for a new feature and never documented, old ones lingering after a refactor, someone committing a real API token "just for reference".

envaudit is a zero-dependency CLI that audits your .env files and flags what's wrong:

• Missing variables: keys in .env.example that your .env doesn't have
• Undocumented keys: variables in .env that don't appear in .env.example
• Empty values: keys that exist but have no value set
• Potential secrets: real credentials in .env.example instead of placeholders

Run it locally in milliseconds:

1npx @albertoarena/envaudit check

Or drop it into CI with a single flag: exits with code 1 when critical issues are found, so misconfigured environments never reach production:

1npx @albertoarena/envaudit check --ci --no-color

Works with any framework or language. No Node.js project required.