Search code examples
react-nativefont-awesome.npmrc

Should .npmrc be ignored?

The Fontawesome Pro instructions describe placing a secret key in a .npmrc file but it is unclear how this file should be managed. Specifically, should this file be ignored by Git?

Solution

  • The Fontawesome Pro instructions are correct as an example of the general approach to managing sensitive information in a .nmprc file :

    • all sensitive values there should be replaced by environment variables, and
    • those variables should then be defined as managed secrets in whatever environment the repo will be pushed to.