Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 21/07/2026Varlock now includes "credential brokering" functionality - your agent (or whatever process) gets only _placeholder_ credentials, and real secrets are swapped in over the wire (MITM proxy). Rules are configured in your existing .env.schema Would love to hear your feedback! 191
Reposted by varlock.devSal Rahman @manlycoffee.techhub.social.ap.brid.gy · 21/07/2026I was previously tending a booth for a product called Varlock. They're incredibly useful for credentials management. Definitely worth a look. They brand themselves as "credentials management in the AI era". github.com/dmno-dev/varlockgithub.comGitHub - dmno-dev/varlock: AI-safe .env files: Schemas for agents, Secrets for humans.AI-safe .env files: Schemas for agents, Secrets for humans. - dmno-dev/varlock 062
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 10/07/2026Super fun chatting with @brandonwhichard.com about varlock. He is a real user - found us through a listener and has been using it ever since. Have a listen! 🎧 031
Reposted by varlock.devBrandon Whichard @brandonwhichard.com · 10/07/2026The .env file: every project has one, almost nobody manages it well. This week I sat down with the founders of varlock to talk about fixing that. 052
varlock.dev @varlock.dev · 10/07/2026"Everyone has a place for Varlock in their tech stack." Thanks for the great conversation @softwaredefinedtalk.com www.softwaredefinedtalk.com/580softwaredefinedtalk.comVarlock: Bringing Order to the Chaos of Environment VariablesEvery project has environment variables. Almost nobody manages them well. This week Brandon talks with Phil Miller and Theo Ephraim, who built varlock to fix that — bringing structure and security to ... 040
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 07/07/2026🧙♂️ varlock@1.10 adds arbitrary codegen. As well as built-in support for php, python, go, rust - so you get a fully typed+coerced env loader to use in your code. Plugins can add codegen types - new possibilities to generate for k8s, terraform... anything! varlock.dev/guides/code-...varlock.devCode generationGenerate types and other code from your env schema, and extend it with plugins 161
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 18/06/2026Say hello to 🐣 fledgling - a new tool to create new npm packages and setup/sync trusted publishing (OIDC) settings. Works great for one offs, but even better in a monorepo! just `npx fledgling` 2167
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 17/06/2026New varlock+mise guide varlock.dev/integrations... Would appreciate a look from any heavy mise users!varlock.devmiseInstall varlock with mise and wire validated env vars into your tasks 062
Reposted by varlock.devDarcy Clarke @darcyclarke.me · 01/06/2026⚡️ We're looking for a DevRel person at @vlt.sh - based in our Toronto 🇨🇦 HQ. You'll work closely w/ me & should love the idea of owning various aspects of product marketing. You'll be vlt's biggest fan & advocate; molding this unique role in a way that plays to your strengths & ours. 22417
Reposted by varlock.devRuy Adorno @ruyadorno.com · 01/06/2026Toronto friends! we're looking for a DevRel to join the @vlt.sh team there! #hiring #toronto www.vlt.io/careers/deve...vlt.ioDeveloper Relations Engineer | Careers | vlt /vōlt/As a Developer Relations Engineer, you will serve as the bridge between vlt and the global JavaScript community. This role combines technical expertise, community engagement, and developer-focused mar... 1104
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 20/05/2026This is an awesome writeup! Another helpful precaution I've been yelling about: get EVERY secret out of plaintext. Many malicious scripts are harvesting creds from .env and other config files. varlock.dev can helpvarlock.devVarlock - AI-safe .env filesAI-safe .env files: schemas for agents, secrets for humans. Validate, secure, and share environment variables with type-safety, leak prevention, and integrations for Next.js, Vite, Astro, and more. 022
varlock.dev @varlock.dev · 08/05/2026Thanks for the shout out @softwaredefinedtalk.com www.softwaredefinedtalk.com/571 (~47:00)softwaredefinedtalk.comThe Enterprise Dunbar numberThis week, we discuss AI labs driving cloud revenue, hyperscalers laying off instead of building, and kids defeating age verification. Plus, Brandon has too many thoughts on Workday. 000
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 06/05/2026As of today @varlock.dev has OIDC workload identity support - this means that for some popular combos of deployment platform + secret storage, you no longer need a secret-zero to pull the rest of your sensitive data. check out varlock.dev/guides/oidc/ to get startedvarlock.devOIDC Workload IdentityAuthenticate with secret providers using OIDC tokens from your deployment platform — no long-lived credentials needed 081
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 28/04/2026Introducing bumpy 🐸 - a new version/release/changelog tool (carefully crafted slop fork of changesets 🦋) Fixes 100s of open issues, much simpler, more flexible. We use it to release @varlock.dev and 25+ linked plugins/libs. bumpy.varlock.dev 4254
varlock.dev @varlock.dev · 28/04/2026DMNO (varlock) was one of the fastest growing open-source orgs on GitHub in Q1. Thanks for the recognition @supabase.com >commitvc #osscarindex osscar.dev/org/dmno-devosscar.devDMNO — OSSCAR Q1 2026DMNO on OSSCAR Q1 2026 with a composite score of 3.000. 092
varlock.dev @varlock.dev · 21/04/2026A great varlock overview using @1password.bsky.social and @svelte.dev deployed on @vercel.com by @thitemple.me www.youtube.com/watch?v=7n3i...youtube.comI Deployed to Vercel and Only Set One Secret — varlock Did the RestYouTube video by Thiago Temple 060
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 17/04/2026To celebrate @cloudflare.social's epic week - the new @varlock.dev workers integration got a revamp and it is RAD. We totally fixed env vars in workers. varlock.dev/integrations... Full validation, pull from anywhere, set env atomically w/ each deploy. No more mix of .dev.vars/.env/wrangler.tomlvarlock.devCloudflare WorkersHow to integrate varlock with Cloudflare Workers and Wrangler for secure, type-safe environment management 031
Reposted by varlock.devDigital Brain @yourdigitalbrain.bsky.social · 07/04/2026Unlock the potential of your AI projects with dmno-dev/varlock. Secure your .env files with schemas designed for agents and secrets meant for humans. sinapti.ca/post/en/varlock-typed-sc…sinapti.caVarlock: typed schema environment variables to protect secrets in AI projects, over 3,000 stars on GitHub - SinapticaIf you use AI agents for programming, you already know the risk: the assistant reads your work environment and, with it, your secrets. Varlock elegantly solves 021
varlock.dev @varlock.dev · 01/04/2026March recap — featuring @nextjs.org (full Turbopack), @cloudflare.social Workers, @expo.dev & plugins for @dashlane.com @hashicorp.com @proton.me me @passbolt.bsky.social (+ KeePass & unix pass): varlock.dev/blog/march-2...varlock.devMarch 2026 Recapvarlock@0.7.0 adds better plugin authoring with ESM/TypeScript single-file plugins, the Next.js integration gains full Turbopack support, we launch Cloudflare and Expo integrations, and the community ... 020
varlock.dev @varlock.dev · 19/03/2026Love to see it! Evert from @vlt giving a shout out at TorontoJS 030
varlock.dev @varlock.dev · 16/03/2026Stoked to be featured in @nickyt.online 's awesome One Tip a Week newsletter which is quickly becoming one of our favourites. one-tip-a-week.beehiiv.com/p/one-tip-a-...one-tip-a-week.beehiiv.comOne Tip a Week: Stop Shipping Broken Env Config 021
Reposted by varlock.devGitHub Trending JS/TS @github-trending-js.bsky.social · 13/03/2026🚀 Skyrocketing! 🚀 (200+ new stars) 📦 dmno-dev / varlock ⭐ 2,270 (+357) 🗒 TypeScript .env files built for sharing powered by @env-spec decorator commentsgithub.comGitHub - dmno-dev/varlock: .env files built for sharing powered by @env-spec decorator comments.env files built for sharing powered by @env-spec decorator comments - dmno-dev/varlock 142
varlock.dev @varlock.dev · 12/03/2026We appreciate the post and the feedback @jesse.id ! Those getting started docs are due for an update :) jesse.id/blog/posts/u... 142
Reposted by varlock.devDavid De Sloovere @endevr.be · 11/03/2026Listened to the pod, but visiting varlock.dev made it so much better... The artwork is awesome! Will try varlock tomorrow! Also starred the repo 🌟varlock.devvarlock 141
Reposted by varlock.devM̴̛̫̀ã̴̩̙̲͖̖l̴͓̪̮̈́̎p̸͔̘̹̲̘͇͒̽̌̓͗͠e̵̮̙̜̜̝͑̐̕ͅȑ̷͙̰͙̞̐͜͝͠͝c̶̢̱̹̻̚͜í̶̡̝̀̅̽̏ŏ̴̩͓̈̀̂ @malpercio.dev · 11/03/2026gonna start using varlock.dev just because this site is coolvarlock.devvarlock 172
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 09/03/2026varlock was featured on our favourite webdev podcast @syntax.fm today :) Check it out! www.youtube.com/watch?v=M5Ik...youtube.comStop putting secrets in .envYouTube video by Syntax 4203
Reposted by varlock.devGitHub @github.com · 17/02/2026Who knows how to secure open source better than the maintainers themselves? 🛡️ 4277
varlock.dev @varlock.dev · 17/02/2026Varlock was one of the projects selected for the @github.com Secure Open Source Fund! We worked with security experts to level up our fundamentals like threat modeling, responsible disclosure, automated scanning, and more. Here's what we learned and shipped: varlock.dev/blog/github-...varlock.devHow Varlock Is Leveling Up Security Through the GitHub Secure Open Source Fund 252
varlock.dev @varlock.dev · 10/12/2025Really great chatting with @thisdotlabs.bsky.social @robocel.bsky.social about all things varlock.dev 011
Reposted by varlock.devBen Vinegar @benv.ca · 09/10/2025🇨🇦 Devtools Toronto is returning Tues, Nov 4th at BDC Community Square. Featuring hands-on demos from 1Password, Tempo, Keyflow, Wispbit, and Varlock (DMNO) 👇 RSVP link below 192
Reposted by varlock.devReact Advanced London @reactadvanced.gitnation.org · 11/09/2025Meet our speakers for the upcoming #ReactTorontoMeetup 🎉 @techsev.bsky.social — How I Ignored Reddit and Made a Steam Game Using React Sergiy Dybskiy — Make Agents Talk to You @dmno.bsky.social — Secure Secrets in Next.js for Human and Non-Human Developers 🔗 Register: guild.host/events/react... 122
Reposted by varlock.devNick Taylor @nickyt.online · 01/09/2025A critical feature launch turns sour when key analytics go missing! Discover the common pitfalls in deployment, from overlooked post-production keys to staging vs. prod discrepancies. 🙈 Varlock from @dmno.bsky.social to the rescue! #cicd #environmentvariables #typesafety 131
Reposted by varlock.devNick Taylor @nickyt.online · 21/08/2025Here's the PR with what we did on the live stream. Thanks again for hanging Theo Ephraim and Phil Miller! github.com/nickytonline...github.comchore: add environment configuration and integrate varlock by nickytonline · Pull Request #22 · nickytonline/nickyt.liveThis pull request introduces environment variable management using the Varlock library and its Astro integration. It standardizes how environment variables are accessed throughout the codebase, imp... 141
Reposted by varlock.devNick Taylor @nickyt.online · 21/08/2025Looking forward to hanging with the @dmno.bsky.social crew again tomorrow! Come hang as we dig into Varlock with @astro.build! www.youtube.com/watch?v=AG9r...youtube.comLevelling up Astro env with VarlockYouTube video by Nick Taylor 042
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 28/07/2025New varlock vite integration is now live. More vite-based framework integrations coming shortly, and works already with qwik! Your env vars deserve a little more magic in their lives 🧙♂️✨ varlock.dev/integrations...varlock.devViteHow to integrate varlock with Vite for secure, type-safe environment management 073
varlock.dev @varlock.dev · 24/07/2025Live stream today with @nickyt.online @ 1:30pm EST, talking all things varlock and DMNO. nickyt.live#2025-07-24-p...nickyt.liveNick Taylor's live streaming scheduleLinks to Nick Taylor's live streaming channels and content 011
varlock.dev @varlock.dev · 17/07/2025Happy to be featured in today's @console.dev. More integrations coming soon! 000
Reposted by varlock.devJosh W. Comeau @joshwcomeau.com · 16/07/2025🔥 My friends at DMNO have a new devtool: varlock. It’s a drop-in replacement for dotenv, and adds a bunch of cool stuff like validation and type safety. It stores the secrets themselves in password managers or encrypted vaults. The landing page also has a very cool RPG vibe 😄 varlock.dev 5819
varlock.dev @varlock.dev · 16/07/2025We recently launched varlock.dev. Similar to DMNO but built on top of the .env files you're already using. The early feedback has been really positive. Check it out, ⭐ star us on GitHub and let us know what you think!varlock.devvarlock 122
Reposted by varlock.devTheo Ephraim @theozero.bsky.social · 10/04/2025Over at @dmno.bsky.social, we use our @1password.bsky.social plugin every day - keeping our secrets synced, validated, and secured behind biometric unlock - away from prying AIs 🚫🤖 Incredibly proud to share we are the first feature on their new developer blog ❤️1password.communityDeveloper spotlight: How DMNO is building on 1PasswordDMNO is a configuration toolkit for development and deployment workflows. Learn how the DMNO team leveraged 1Password CLI and SDKs to build a plugin that... 021
varlock.dev @varlock.dev · 12/02/2025Appreciate the shoutout from @wesbos.com on the latest @syntax.fm about an old Web MIDI project of Phil's! open.spotify.com/episode/3kJ1...open.spotify.com876: MIDI & Music in the BrowserSyntax - Tasty Web Development Treats · Episode 0192
varlock.dev @varlock.dev · 27/11/2024Anyone running their own PDS? If so how are you managing it? 110
varlock.dev @varlock.dev · 20/11/2024Really nice to see this in this year's State of DevOps. If you make devtools, external or internal, then your product is docs. 000