dot-env-it/signature
The small source tree has no tests, security scanning, or security policy, while maintenance stopped after the initial release. MIT licensing, organization backing, and a matching repository help, but workflow permissions and unpinned actions add avoidable hygiene concerns.
58%
Total Score
75
100
78
75
Health Score Breakdown
A README is present, but it is only 11 characters long and neither the artifact nor repository contains tests or a changelog. The missing tests and changelog are not expected in the published artifact, but the repository still offers little validation or release documentation.
The package is 125 days old and has only one release, so its release and maintenance track record is not yet established.
There were zero commits and zero active maintainers in the last three months, which is concerning for a package whose only release is about four months old.
The repository has no stars, forks, or watchers. This is weak supporting evidence, but popularity alone does not determine health.
Composer is used for the build, but no security scanning tools are configured, leaving an avoidable maintenance and assurance gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 4 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.