done
envgraph
Shows where your environment variables are actually used.
- AST
- analysis approach
envgraph scans your codebase for process.env and dotenv usage, maps each variable to the places that read it, and flags the ones you probably didn't mean to commit. It has no runtime and no magic, just an AST walker that saves you from guessing.
details
- 01
the problem
Env variables are easy to add and hard to track down later.
- 02
the result
A static map showing where each variable is read.
- 03
how it works
An AST walker with no runtime instrumentation.
highlights
- Finds env variable usage directly in your JS/TS code.
- Pure static analysis, no runtime needed.
- Catches leaked secrets and unused variables early.