// blog
Thoughts on developer security, .env management, the Rust ecosystem, and building tools that get out of your way.
Featured
I pushed AWS credentials to a public GitHub repo. Three services went down. A poorly formatted LLM prompt pointed me toward a solution. Here's the full story — and what I built so you never have to explain that incident to your lead.
All Posts
Everything you need to know about getting your CLI tool into the Windows Package Manager — including the ZIP trap, the silent cascade trigger bug, the Defender false positive, and how to automate every release after the first.
A complete guide to automating code quality at commit time — from raw git hooks to pre-commit and prek frameworks, popular community hooks, and using evnx to protect your .env files automatically.
A comprehensive comparison of 10+ secrets management providers. From AWS Secrets Manager to Infisical, we break down pricing, security, DX, and when to use each. Plus: hybrid approaches and cost analysis for startups vs enterprises.
Master configuration management by understanding when to use .env, YAML, and JSON secrets. Learn security best practices and how to prevent leaks with evnx.
A deep dive into client-side encryption, key derivation, and how evnx cloud implements zero-knowledge architecture for environment variables.
A comprehensive guide to environment variable management: understand the critical differences between .env files, avoid catastrophic security mistakes, and learn how modern tools like evnx, dmno, and varlock solve configuration drift.
A deep dive into environment variable management in Rust. Learn when to use std::env, dotenvy, env!, and how to build type-safe config structures that scale from local dev to production.
A deep dive into pydantic-settings for type-safe .env validation — compared against os.environ, python-dotenv, and python-decouple — and how evnx closes the security gaps they all leave open.
A comprehensive guide to managing environment variables in Python—covering python-dotenv, Pydantic Settings validation, and modern tooling like evnx for type-safe, production-ready configuration.
Learn how to install and use @evnx/cli with npm and npx. A practical guide featuring Next.js integration and interactive setup workflows.
Configuration management isn't just a technical challenge—it's a psychological one. Explore the cognitive load, deployment anxiety, and how modern tooling like evnx turns config chaos into calm for developers at every level.
What happens when the team behind evnx—the CLI for environment variable management—uses evnx to build evnx-web, its own website? Spoiler: no .env-y feelings, just clean commits and supa-fast setup. Here's how we dogfooded our tool to add Supabase, with puns intact.
Every Next.js developer uses .env.local, but where did it come from? Dive into the history of environment variable management, from the 2012 Ruby gem to the new wave of Rust-based tools.
A comprehensive walkthrough of Rust documentation conventions — covering doc comment syntax, module-level docs, doc tests, intra-doc links, advanced patterns, and every community standard from the Rust API Guidelines.