envpact
envpact
Role
Single source of truth for environment secrets across the family. Every site / Worker / GitHub Action reads from envpact at deploy.
Free tier
- Self-hosted / personal use, no quota
- Owner: the user (
chirag127/envpactrepo)
Card / subscription required?
NO. It's the user's own tool.
Alternatives
- Doppler free (5 users)
- Infisical (5 users)
- GitHub Secrets only (loses cross-repo)
Swap cost
High — every site reads via the envpact client. Swap means rewriting the secret-pull step in every site's deploy and every Worker's startup.
Why this is our pick
Owned by the user, fits the family's trust model, and the secret shape is already aligned to it.
Cross-refs
- GitHub Actions — pulls secrets at deploy
- Cloudflare Workers