Installation

Global Install

npm install -g envpkt
# or
pnpm add -g envpkt

Once installed globally, the envpkt command is available everywhere:

envpkt --version
envpkt --help

Local Install

Add envpkt as a dev dependency to your project:

npm install -D envpkt
# or
pnpm add -D envpkt

Then run via npx or package scripts:

npx envpkt audit

Run Without Installing

npx envpkt env scan
npx envpkt audit

Requirements

envpkt needs Node 22.12 or later, and nothing else. It seals, unseals and makes keys in-process with age-encryption, so you don’t install the age CLI. The format is standard age: age -d decrypts what envpkt seals, and envpkt unseals values sealed by age.

envpkt reads plain age key files, like the ones envpkt keygen and age-keygen write. A passphrase-protected key file, an age plugin key or an SSH key fails with an error that names the file. Run envpkt doctor to check that a config resolves and its key works.

Library Usage

envpkt is also a TypeScript library. Import functions directly:

import { boot, loadConfig, computeAudit, scanFleet } from "envpkt"

See the Library API reference for full documentation.