alireaza/dot-env-resolver-commands

Release historycaution

The latest release was published over four years ago, with no releases in the last 12 months. This is strong evidence of inactivity, although the package may be stable and narrowly scoped.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap. No newer maintenance activity is visible to offset that concern.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are present. The missing scanning is a modest hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities. This is a modest transparency gap for a maintained dependency, though the package is small and has a limited file tree.