Why can't I add a new .env file

[Residual2023528]

Question:


Why can’t I add a new .env file, I have already installed dotenv.
Repl link:

[not-ethan]

Hey @Residual2023528 welcome to the forums!

Because the .env file would still be public. Instead you can use secrets witch is the same but it will truly keep your keys and stuff secret https://docs.replit.com/programming-ide/workspace-features/secrets

[bigminiboss]

you see, but why can’t we make it … private ;-;

[not-ethan]

I do not know. My guess is because Replit’s infrastructure is not built to hide it and it would not be easy to hide it because of all the places it could be shown.

[bigminiboss]

oh ok sorry then I wish we could rework it that way but oh well. The only thing confusing me is that it used to work with infra so I wonder what they changed…

[Residual2023528]

Thank you, but I have another question that has nothing to do with this. Why is the package.json of replit different from that of vscode? Can I add this line (please see the circled part of the picture)?

[Residual2023528]

The reason why I want to add this line is because of this teaching, he added it this way, I want to say that it will be more convenient when studying in the future.

[bigminiboss]

yes you can add it to replit

[ShaneAtReplit]

We disabled .env files a while back due to a vulnerability that allowed anyone to access them.