Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST
No vulnerabilities detected
