Security
Secret leaking
Fatima helps you prevent secret leaking in your codebase.
ESlint
The Plugin
Fatima provides an ESLint plugin containing two rules: no-process-env and no-env.
The former is enabled by default, and it will prevent you from accessing process.env in your codebase.
This helps you avoid accidentally leaking secrets, as process.env does not provide any kind of safety. It also keeps your codebase consistent.
As for the latter, it prevents you from acessing the env object generated by fatima, and it needs to be enabled manually as it requires you to specify the files you don't want to access the object.
Setup
In the example above, we're enabling the no-env rule for all .tsx files.