bear/dotenv

Release historycaution

Only two releases have been published, with none in the last 12 months and the latest released over five years ago. This limits evidence of ongoing maintenance, despite the package reaching a stable major version.

Repo commit activitycaution

The repository recorded no commits or active maintainers in the last three months, consistent with a project whose latest release is over five years old. The repository is still available, but current fix capacity is uncertain.

Workflow auditcaution

All three workflows were analyzed with no reported audit findings, dangerous untrusted checkouts, or script injections. However, all 17 analyzed action references are unpinned, leaving a supply-chain hygiene gap.