ambient-authority

Your dependencies can read your environment variables. JavaScript lets them.

Ambient authority means any code in your Node.js process can touch the filesystem, network, and environment.