Skip to content

Node v0.1.0-alpha.1 — first publish

Pre-release
Pre-release

Choose a tag to compare

@davidalmeidac davidalmeidac released this 06 May 02:37
· 117 commits to main since this release

First publish to npm 🎉

This is the first public alpha of sealed-env for Node.

What's working

  • basic mode: AES-256-GCM encryption with master key
  • team mode: + HMAC integrity verification
  • enterprise mode: + TOTP-bound unseal tokens for production deploys
  • CLI: init, encrypt, decrypt, unseal
  • Auto-load: import 'sealed-env/config'
  • Zero runtime dependencies

Known limits (alpha)

  • Java port is not yet shipped (coming next)
  • Wiki content is still being written
  • Argon2id KDF is mapped to scrypt internally for v0.1.x; native Argon2 lands in v0.2

Install

npm install sealed-env@next

Threat model

See THREAT_MODEL.md — built around real 2024–2026 attacks (Shai-Hulud, tj-actions, GhostAction).