I built a CLI to stop myself from committing API keys (and broken .env files)

A developer built envcheck, a zero-dependency Node CLI for validating .env files against expected keys or schemas.

It also scans repositories for exposed secrets using known patterns and high-entropy string detection, with redacted findings.

The tool is designed for CI and returns exit codes that can block broken configs or credential leaks before deployment.