dotenv VS joi

We will put our Emailjs environment variables in a dotenv (.env) file. To read more about the purpose of this file click here.

Add .env to your .gitignore file to prevent it from being committed. Here's an example file with it already added. You may also use dotenv for advanced configuration and it will automatically load environment variables from a .env file into process.env.

dotenv: Designed to load environment variables from a .env file into the process.env environment

Like Doppler, Infisical uses environment variable injection. Similar to the Dotenv package for Node, when used in Node, it injects them at run time into the process object of the running app so they're not readable by any other processes or users. They can still be revealed by a crash dump or logging, so that is a caveat to consider in your code and build scripts.

We'll be working with databases' ids and different info that should be secured so I would advise you to create a .env file to store said info. We'll do this by installing dotenv into our project and use it accordingly:

dotenv - For reading our API keys from the environment

As an avid dotenv user I wanted to thank their maintainers for keeping the project alive for 10 years (wow). A perfect exemplary of dedication to Open Source.

Sensitive data like database URLs, API keys, and passwords should never be hardcoded in your application code. Instead, use environment variables accessed at runtime to keep this information secret. Popular dotenv libraries like dotenv make this easy for Node.js apps.

Package Feature Merit Demerit Link Zod TypeScript-first schema validation with static type inference Method chaining and easy to get ts type Newer package zod.dev joi This is almost same to zod Have many plugins Doesn't support static type inference https://github.com/sideway/joi Yup This is almost same to zod Have many plugins Missing some feature, function, deep object, promise... ... https://github.com/jquense/yup class-validator Validate class properties Have many features Code isn't clean https://github.com/typestack/class-validator ajv Validate by json scheme Enable to share schem to other languages Not supported typescript https://ajv.js.org/

Using Joi, a data validator for JavaScript.

See how I've used joi for validating the request body. You can install and use different libraries like this inside the helpers/routes. Joi can be installed with the following command:

3. joi

⭐ Recommended: Doing this manually is a ton of work, and if you're dealing with unknown objects often it would be better to lean onto a validation library to simplify it. My personal favorite is superstruct, although lots of people like joi or zod. They all do the same thing

The class-validator / class-transform looks really nice for formatting/validation but there is also joi. suretype is attractive since theoretically typeconv could generate jsonSchema for json-schema-faker and Open API docs.

Since Typescript is just a language and not a library of some sorts, it doesn't add runtime functionality. If this is what you're after, there's so many libraries that help converting unknown's into known types - joi, yup, superstruct (my choice), purify-ts Codec, io-ts

What does this library provide that is not provided by Yup, Zod, Superstruct (a personal favorite), Joi, Nope, computed-types, typanion, and all the other validation libraries?

True, I remember there's Yup and joi for JavaScript