Theo Ephraim
@theozero.bsky.social
π€ 92
π₯ 52
π 75
π§ββοΈπͺπ
https://varlock.dev
Open sourcerer, devtools builder, entrepreneur
As of today
@varlock.dev
has OIDC workload identity support - this means that for some popular combos of deployment platform + secret storage, you no longer need a secret-zero to pull the rest of your sensitive data. check out
varlock.dev/guides/oidc/
to get started
loading . . .
OIDC Workload Identity
Authenticate with secret providers using OIDC tokens from your deployment platform β no long-lived credentials needed
https://varlock.dev/guides/oidc/
9 days ago
0
8
1
Varlock v1 also now has built-in macOS keychain support. Write `ITEM=keychain(prompt)` and you get a native mac popup to choose/add an item. It writes back to your schema with the id. ACL is limited and reading is gated behind fingerprint.
15 days ago
1
5
0
Pushed a HUGE varlock@v1 featuring built-in local encryption via native binaries. No extra setup, and you get native DX to decrypt using biometrics. This is for local git-ignored values, and acts as foundation for future caching + team vaults. Get EVERY secret out of plaintext!
16 days ago
1
5
0
Introducing bumpy πΈ - a new version/release/changelog tool (carefully crafted slop fork of changesets π¦) Fixes 100s of open issues, much simpler, more flexible. We use it to release
@varlock.dev
and 25+ linked plugins/libs.
bumpy.varlock.dev
17 days ago
4
25
5
reposted by
Theo Ephraim
varlock.dev
17 days ago
DMNO (varlock) was one of the fastest growing open-source orgs on GitHub in Q1. Thanks for the recognition
@supabase.com
>commitvc
#osscarindex
osscar.dev/org/dmno-dev
loading . . .
DMNO β OSSCAR Q1 2026
DMNO on OSSCAR Q1 2026 with a composite score of 3.000.
https://osscar.dev/org/dmno-dev
0
9
2
To celebrate
@cloudflare.social
's epic week - the new
@varlock.dev
workers integration got a revamp and it is RAD. We totally fixed env vars in workers.
varlock.dev/integrations...
Full validation, pull from anywhere, set env atomically w/ each deploy. No more mix of .dev.vars/.env/wrangler.toml
loading . . .
Cloudflare Workers
How to integrate varlock with Cloudflare Workers and Wrangler for secure, type-safe environment management
https://varlock.dev/integrations/cloudflare/
28 days ago
0
3
1
Want to realize you've been storing your celery wrong your whole life? check out
howtostore.food
π₯¦π₯π Idea has been kicking around in my head for 10+ years, finally made feasible by AI. Still more to do, but very proud of the native view transitions! (built on
@astro.build
and
@cloudflare.social
)
loading . . .
Food Storage Guide | HowToStore.food
How to store food so it stays fresh longer. Storage guides by item, method, and category.
https://howtostore.food
about 1 month ago
0
5
2
Huge month for
@varlock.dev
If you use next.js or cloudflare workers, take it for a spin and let me know what you think!
add a skeleton here at some point
about 1 month ago
0
1
1
reposted by
Theo Ephraim
GitHub Trending JS/TS
2 months ago
π SkyrocketingοΌ π (200+ new stars) π¦
dmno-dev
/
varlock
β 2,270 (+357) π TypeScript .env files built for sharing powered by @env-spec decorator comments
loading . . .
GitHub - dmno-dev/varlock: .env files built for sharing powered by @env-spec decorator comments
.env files built for sharing powered by @env-spec decorator comments - dmno-dev/varlock
https://github.com/dmno-dev/varlock
1
4
2
reposted by
Theo Ephraim
varlock.dev
2 months ago
We appreciate the post and the feedback
@jesse.id
! Those getting started docs are due for an update :)
jesse.id/blog/posts/u...
1
5
2
varlock was featured on our favourite webdev podcast
@syntax.fm
today :) Check it out!
www.youtube.com/watch?v=M5Ik...
loading . . .
Stop putting secrets in .env
YouTube video by Syntax
https://www.youtube.com/watch?v=M5IkdUunf8g
2 months ago
4
21
3
reposted by
Theo Ephraim
varlock.dev
3 months ago
Varlock was one of the projects selected for the
@github.com
Secure Open Source Fund! We worked with security experts to level up our fundamentals like threat modeling, responsible disclosure, automated scanning, and more. Here's what we learned and shipped:
varlock.dev/blog/github-...
loading . . .
How Varlock Is Leveling Up Security Through the GitHub Secure Open Source Fund
https://varlock.dev/blog/github-secure-open-source-fund
2
7
2
Thanks so much for having us on :)
add a skeleton here at some point
5 months ago
0
3
0
@jessety.bsky.social
- came across env-smart - thought you might like
varlock.dev
:)
loading . . .
varlock
https://varlock.dev
5 months ago
0
1
0
This stuff is getting more important every day... Along with everything else, let's get all secrets out of plaintext!
add a skeleton here at some point
6 months ago
1
5
2
About to chat live with
@nickyt.online
about varlock, astro, env var management, and everything dev tools. Come have a listen!
add a skeleton here at some point
9 months ago
1
2
1
Great opportunity to work with some awesome humans!
add a skeleton here at some point
10 months ago
0
1
0
New varlock vite integration is now live. More vite-based framework integrations coming shortly, and works already with qwik! Your env vars deserve a little more magic in their lives π§ββοΈβ¨
varlock.dev/integrations...
loading . . .
Vite
How to integrate varlock with Vite for secure, type-safe environment management
https://varlock.dev/integrations/vite/
10 months ago
0
7
3
As always,
@joshwcomeau.com
provides an amazing explanation of how something on the web works. This time it's a deep dive into SVGs! <3
add a skeleton here at some point
10 months ago
0
1
0
reposted by
Theo Ephraim
Josh W. Comeau
10 months ago
π₯ My friends at DMNO have a new devtool: varlock. Itβs a drop-in replacement for dotenv, and adds a bunch of cool stuff like validation and type safety. It stores the secrets themselves in password managers or encrypted vaults. The landing page also has a very cool RPG vibe π
varlock.dev
loading . . .
5
81
11
reposted by
Theo Ephraim
varlock.dev
10 months ago
We recently launched
varlock.dev
. Similar to DMNO but built on top of the .env files you're already using. The early feedback has been really positive. Check it out, β star us on GitHub and let us know what you think!
loading . . .
varlock
https://varlock.dev/
1
2
2
Over at
@dmno.bsky.social
, we use our
@1password.bsky.social
plugin every day - keeping our secrets synced, validated, and secured behind biometric unlock - away from prying AIs π«π€ Incredibly proud to share we are the first feature on their new developer blog β€οΈ
loading . . .
Developer spotlight: How DMNO is building on 1Password
DMNO is a configuration toolkit for development and deployment workflows. Learn how the DMNO team leveraged 1Password CLI and SDKs to build a plugin that...
https://www.1password.community/blog/developer-blog/how-dmno-is-building-on-1password-to-streamline-and-secure-configuration-managem/154428
about 1 year ago
0
2
1
Thanks for the mention :D
dmno.dev
is (in my humble and very biased opinion) the best way to deal with config in all of your projects, regardless what your stack looks like.
add a skeleton here at some point
about 1 year ago
0
3
0
welcome to the era of enshittification
over 1 year ago
0
0
0
Pretty proud of this very snazzy new css 3d button. Made it to match the styling of the 3d dominos. See it live at
dmno.dev
(better on desktop to see hover) Thanks
@joshwcomeau.com
for the easing tips on your 3d button article :)
over 1 year ago
1
3
0
you reached the end!!
feeds!
log in