seems easy to hack your password...

[zg2pro]

Yes your solution is good, but anybody could put a

console.log("ftp.password =" + ftpConfig.password); 

in your script and see your passsword in clear in your https://travis-ci.org/joymon/travis-ci-test
not very secure, is it ?

[joymon]

I could see it in the below format. Could you please help me to understand?
$ export ftp_password=[secure]