PHP-DotEnv is a lightweight PHP library designed to simplify the management of environment variables in your PHP applications.
15%
Total Score
critical
Unfit to use: the package is deprecated and its source repository is archived with no recent development.
Packagist marks the entire package as abandoned and recommends michel/dotenv, so this release should not be adopted despite other healthy metadata.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the abandonment concern.
The linked repository is archived, which is a strong sign that ongoing maintenance and future fixes are unavailable.
The package has existed since January 2021 with 11 releases, but it had no releases in the last 12 months, indicating stalled maintenance.
Composer is used for builds, but no security-scanning tool is present; this is a minor transparency and hygiene gap rather than a standalone adoption blocker.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.