dotenv

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated recent commit share represents a genuine maintainer-continuity risk.

Repo bus factorcaution

One contributor made about 83% of the 95 recent commits, creating concentration risk, although 14 contributors were active during the period.

Workflow auditcaution

The sole workflow was fully analyzed with no high-confidence audit findings or dangerous untrusted triggers, but both action references are unpinned, leaving avoidable update and tampering risk.