A global executable to run applications with the ENV variables loaded by dotenv
70%
Total Score
50
100
94
83
Only one account has registry publish access. That is a limited publishing base, though this administrative count does not by itself establish whether repository maintenance is broader.
The repository recorded zero commits and zero active maintainers over the last three months, which weakens evidence of ongoing maintenance despite the recent release.
The repository uses no build tools and has no security scanning tools. The simple CLI structure makes the lack of build tooling understandable, but the absent security scanning reduces assurance.
No repository security policy is present, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dotenv Version ^17.1.0 | — | — |
minimist Version ^1.2.6 | — | — |
cross-spawn Version ^7.0.6 | — | — |
dotenv-expand Version ^12.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.