glitchdotcom/dotenv

a totally tubular 🏄🏼 library to parse and manipulate dotenv syntax

dotenv's Issues

Type declarations are not published

The index.d.ts file at the root of the repository is not published. Users have no way to consume the type definitions as a result.

Functions return `any` instead of `unknown`

A common mistake in TypeScript code is the use of any in places where it should actually be unknown. From a linguistic perspective, any implies that something has the potential to be anything. In effect, however, the TypeScript sees this as sort of a wildcard which, linguistically, would make any more of an everything type.

This is an important distinction to make when dealing with TypeScript because any will break the type safety ensured by the TypeScript compiler for the end user.

This excellent Gist has a great chart that explains the type system and where any and unknown fall into it.

npm reports several vulnerabilities within the installed dependencies

$ npx -p npm@6 npm install
[…]
5 vulnerabilities (2 low, 1 moderate, 2 high)

To address all issues, run:
  npm audit fix