initphp/dotenv

Repo bus factorcaution

One contributor made all commits in the last three months. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, so recent maintenance activity is limited despite the recent release.

Repo toolingcaution

Composer build tooling is present and a security policy exists, but no security scanning tool is reported, leaving a modest repository-hygiene gap.

Workflow auditcaution

The workflow audit completed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 13 action references are unpinned, which weakens build reproducibility and supply-chain control.