is it better to use `.env` or` secret.js` to keep our variables secret?

Question

I see a lot of projects using .env variables and using it inside a project through process.env but also I see another project using a secret.