@dotenvx/dotenvx 1.48.2 → 1.48.4

package/package.json

@@ -1,7 +1,7 @@
 {
-  "version": "1.48.2",
+  "version": "1.48.4",
   "name": "@dotenvx/dotenvx",
-  "description": "a better dotenv–from the creator of `dotenv`",
+  "description": "a secure dotenv–from the creator of `dotenv`",
   "author": "@motdotla",
   "keywords": [
     "dotenv",
@@ -44,7 +44,7 @@
   "funding": "https://dotenvx.com",
   "dependencies": {
     "commander": "^11.1.0",
-    "dotenv": "^16.4.5",
+    "dotenv": "^17.2.1",
     "eciesjs": "^0.4.10",
     "execa": "^5.1.1",
     "fdir": "^6.2.0",

package/src/lib/helpers/proKeypair.js

@@ -13,13 +13,9 @@ class ProKeypair {
     let result = {}
 
     try {
-      // if installed as sibling module
-      const projectRoot = path.resolve(process.cwd())
-      // eslint-disable-next-line no-eval
-      const dotenvxProPath = eval('require').resolve('@dotenvx/dotenvx-pro', { paths: [projectRoot] }) // necessary for webpack builds
-      // eslint-disable-next-line no-eval
-      const { keypair } = eval('require')(dotenvxProPath) // necessary for webpack builds
-      result = keypair(this.envFilepath)
+      const fallbackBin = path.resolve(process.cwd(), 'node_modules/.bin/dotenvx-pro')
+      const output = childProcess.execSync(`${fallbackBin} keypair -f ${this.envFilepath}`, { stdio: ['pipe', 'pipe', 'ignore'] }).toString().trim()
+      result = JSON.parse(output)
     } catch (_e) {
       try {
         // if installed as binary cli

package/src/lib/services/run.js

@@ -100,6 +100,8 @@ class Run {
       const privateKeyName = guessPrivateKeyName(envFilepath)
       const { parsed, errors, injected, preExisted } = new Parse(src, privateKey, this.processEnv, this.overload, privateKeyName).run()
 
+      row.privateKeyName = privateKeyName
+      row.privateKey = privateKey
       row.src = src
       row.parsed = parsed
       row.errors = errors