# Install varlock with npm

AI-safe .env files: Schemas for agents, Secrets for humans. Version 1.7.1 via npm; verified 2026-06-25.

## Install

```sh
sudo av install npm:varlock
```

Additional install commands:

### Portable and language managers

- npm (100%):

```sh
npm install -g varlock
```

  Evidence: local npm package metadata

## Package facts

- **Package key:** npm:varlock
- **Package manager:** npm
- **Package manager page:** <https://www.npmjs.com/package/varlock>
- **Version:** 1.7.1
- **Source summary:** AI-safe .env files: Schemas for agents, Secrets for humans.
- **Homepage:** <https://varlock.dev>
- **Repository:** <https://github.com/dmno-dev/varlock>
- **Upstream docs:** <https://varlock.dev>
- **License:** MIT
- **Source archive:** <https://registry.npmjs.org/varlock/-/varlock-1.7.1.tgz>
- **Issue tracker:** <https://github.com/dmno-dev/varlock/issues>
- **Published:** 2026-06-17T08:08:24.411Z
- **Last updated:** 2026-06-25T07:46:41.364Z
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- varlock (cli)

## Build dependencies

- @clack/core
- @clack/prompts
- @env-spec/parser
- @env-spec/utils
- @gunshi/plugin-completion
- @sindresorhus/is
- @types/bun
- @types/node
- @types/semver
- @varlock/ci-env-info
- @vitest/coverage-v8
- ansis
- browser-or-node
- ci-info
- exit-hook
- gunshi
- is-docker
- is-unicode-supported
- is-wsl
- outdent
- semver
- tsup
- vitest

## Install behavior

- Post-install hook: not defined
- Bottle: not available

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 1.7.1
- Package-manager updated: 2026-06-25
- Local data: ok
- Upstream repository: https://github.com/dmno-dev/varlock
- info: No cached GitHub release or tag data was available.

## Security Notes

No matching local secret-handling manifest was found for varlock. Nucleus package metadata is still published here so future coverage has a stable package URL.


## Source Database Details

- **Source Database:** npm registry
- **Dist Tags:** Latest: 1.7.1
- **Version Count:** 58
- **Maintainers:** theo
- **Author:** dmno-dev
- **Publisher:** GitHub Actions
- **Engines:** Bun: >=1.3.3, Node: >=22
- **Integrity:** sha512-IJErlMvwM5dE/w604kk1vSvaoLSjETjBwMkCoLHBway7P9+t5vM9rnC1zqFMUF+ZXkhZ/4Ub5gQdNztyZBdgHQ==
- **Shasum:** eb63840da7c782bea75b4be72a2ca927292e3275
- **Unpacked Size:** 6,058,813
- **File Count:** 0
- **Created At:** 2025-03-31T23:28:24.106Z
- **Latest Published At:** 2026-06-17T08:08:24.411Z
- **Modified At:** 2026-06-17T08:08:24.688Z


## Related links

- [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Matched curated package taxonomy and local package facts.
- [varlock](https://www.automicvault.com/pkg/brew/varlock/) - Same normalized package name appears in another local ecosystem. Shared terms: env, environment, files, management, secrets.
- [n8n](https://www.automicvault.com/pkg/npm/n8n/) - Security-sensitive metadata or terminology overlaps. Shared terms: agents, aws, azure, cloud, config.
- [dotenv-vault](https://www.automicvault.com/pkg/npm/dotenv-vault/) - Local package facts share a topical domain. Shared terms: config, dotenv, env, environment, files.
- [varlock](https://www.automicvault.com/pkg/brew/varlock/) - Same normalized package name exists in another local package ecosystem.

## Sources

- Nucleus package database
- package-page enrichment
- package version freshness
- package relationship graph
- cross-ecosystem install command graph