getenv

Release historycaution

The package has nine releases over more than 14 years, but none in the last 12 months despite the latest release being more than a year old, which weakens evidence of active maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that ongoing maintenance capacity may be limited.

Repo toolingcaution

No build tooling or security scanning tools were detected, leaving fewer automated checks to support release quality and vulnerability monitoring.

Security policycaution

The repository has no security policy, reducing transparency about how users should report and receive fixes for vulnerabilities.

Workflow auditcaution

The only workflow was fully analyzed with no audit findings or untrusted execution paths, but both action references are unpinned, leaving them exposed to upstream reference changes.