SaaSHub helps you find the best software and product alternatives Learn more →
Top 15 TypeScript secrets-management Projects
-
infisical
Infisical is the open-source platform for secrets, certificates, and privileged access management.
Project mention: Ask HN: How do small teams securely share env files? | news.ycombinator.com | 2026-05-23IMO env files are a bit of an anti-pattern, env vars should be set outside the context of your app so that your app doesn't need to care where they come from, it just uses standard env var APIs to read them.
With that said, the problem still exists just one layer higher. If they are secrets, I use Infisical (https://infisical.com/) which is free and self-hostable, and let's you inject secrets at runtime via their CLI. Very handy for small teams.
On top of that, I use direnv (https://direnv.net/) with a hook to infisical's export command. This means when I 'cd' into a project, infisical runs and injects the secrets for my developer environment.
Everything that isn't secret just lives in .envrc and gets loaded by direnv, and you can just send those files however you want because they aren't sensitive.
-
Puter.js
Puter.js - The Backend for AI-Generated Apps. One-shot full-stack apps with your existing AI coding tool. Puter.js gives you Auth, Storage, DB, AI & more, with up to 90% fewer AI tokens than other backend platforms.
-
-
-
shelve
Open-source secret & environment management. Secure, simple, collaborative. CLI & Github Sync
-
-
Project mention: War Story: We Ditched AWS CLI 2.14 for 1Password CLI 2.30 and Cut Secret Leak Risk 50% | dev.to | 2026-04-29
-
envilder
One secret mapping for local dev, CI/CD, and runtime. Envilder resolves cloud secrets from your own vaults without SaaS middlemen, duplicated config, or .env drift.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
dotenv-mask-editor
Secure visual editor for .env files that masks sensitive secrets while allowing easy editing
Project mention: Show HN: Dotenv Mask Editor: No more embarrassing screen leaks of your .env | news.ycombinator.com | 2026-01-21 -
Project mention: Show HN: Capy – A Git-style platform for managing your team's secrets | news.ycombinator.com | 2026-08-05
-
salakala
Generate environment variables from various secret providers via URIs in JSON files, checked into your repository
-
aegis
Credential isolation for AI agents. Local-first transparent proxy — your agent never sees your API keys. (by getaegis)
Project mention: How I Built Aegis — A Credential Isolation Proxy for AI Agents | dev.to | 2026-03-19The source is at github.com/getaegis/aegis — Apache 2.0 licensed. If this approach resonates, stars, issues, and feedback are genuinely helpful.
-
id.wispera
Passport & visa system for AI agent credentials. Detect, classify, and govern API keys, tokens, and secrets across MCP, OpenAI, Anthropic, LangChain, and more. Encrypted vault, policy engine, audit trails, delegation chains. Drop-in MCP server replaces plaintext credential storage.
Website: id.wispera.ai Repo: github.com/gecochief/id.wispera Docs: docs.id.wispera.ai npm: @id-wispera/core PyPI: id-wispera
-
Project mention: Introducing Redenv - A Zero-Knowledge, End-to-End Encrypted Secret Manager Built for the Serverless Era | dev.to | 2025-11-25
GitHub Repo: https://github.com/PRASSamin/redenv CLI: @redenv/cli Runtime Client: @redenv/client If you find it valuable, I would love your feedback. Stars, suggestions, critiques, contributions, everything is welcome.
-
keynv
Self-host secrets manager with an AI-safety layer. Aliases instead of values; AI agents never see real credentials. Cloud option coming.
Project mention: I scanned my own laptop for leaked secrets and found 62,311 of them | dev.to | 2026-07-01Repo: https://github.com/keynv-labs/keynv
-
fadekey.api
A lightweight, stateless Fastify API to share zero-knowledge, self-destructing secrets using only Redis. Ideal for CI/CD pipelines, DevOps, and automation.
Project mention: FadeKey: zero-knowledge, self-destructing secret sharing engine | dev.to | 2026-06-06GitHub Repository (Open-Source Core): https://github.com/fadekey-app/fadekey.api
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
TypeScript secrets-management discussion
TypeScript secrets-management related posts
-
🔐 Stop hardcoding secrets: generate `.env` files from AWS SSM with a simple CLI
-
A simple developer-friendly CLI for managing secrets
-
Snip share: share self-destructing end-to-end encrypted secrets on the CLI
-
Snip share: share self-destructing end-to-end encrypted secrets on the CLI
-
Show HN: A simple developer-friendly CLI for managing secrets
-
Show HN: Share end-to-end encrypted secrets straight from the terminal
-
Managing env variables for Docker and Docker Compose
-
A note from our sponsor - SaaSHub
www.saashub.com | 11 Aug 2026
Index
What are some of the best open-source secrets-management projects in TypeScript? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | infisical | 28,600 |
| 2 | console | 902 |
| 3 | envkey | 670 |
| 4 | shelve | 442 |
| 5 | dmno | 305 |
| 6 | load-secrets-action | 301 |
| 7 | envilder | 138 |
| 8 | dotenv-mask-editor | 24 |
| 9 | capy-cli | 16 |
| 10 | salakala | 15 |
| 11 | aegis | 13 |
| 12 | id.wispera | 4 |
| 13 | redenv | 4 |
| 14 | keynv | 3 |
| 15 | fadekey.api | 0 |
Sponsored
Puter.js - The Backend for AI-Generated Apps
One-shot full-stack apps with your existing AI coding tool. Puter.js gives you Auth, Storage, DB, AI & more, with up to 90% fewer AI tokens than other backend platforms.
developer.puter.com