title: How to use environment variables in package.json
body: <p>Because we don't want sensitive data in the project code, including the package.json file, using environment variables would be a logical choice in my opinion.</p>
  <p>Example package.json:</p>
  <pre><code>  &quot;dependencies&quot;: {
      &quot;accounting&quot;: &quot;~0.4.0&quot;,
      &quot;async&quot;: &quot;~1.4.2&quot;,
      &quot;my-private-module&quot;:&quot;git+https://${BB_USER}:${BB_PASS}@bitbucket.org/foo/bar.git&quot;
  </code></pre>
  <p>Is this possible?</p>
  <p>The question is <em>not</em> if this is <em>wise</em> or <em>not good</em>, just <strong>if it's possible</strong>.</p>