@t3-oss/env-nextjs

Release historycaution

The package is mature at 1,244 days old with 59 releases, but only three releases in the last 12 months indicate a slower recent cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning despite the recent push recorded elsewhere.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, so current project activity appears limited.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.

Workflow auditcaution

All eight analyzed action references are unpinned, reducing workflow reproducibility. The audit also found high-confidence template-injection patterns, but with no pull_request_target, workflow_run, untrusted checkout, or script-injection trigger, these remain workflow hygiene concerns rather than standalone severe risk.