Loads CASC config files -- a hierarchical, extensible config language with imports, variables, interpolation, loops, and consumer-registered resolvers/tags -- into native PHP values, secrets redacted by default.
68%
Total Score
caution
A first release with no established history, no recent commits, and unpinned workflow actions limits confidence.
Only one registry account has publish access. That is a limited publishing base for a user-owned project and leaves little visible redundancy if the maintainer becomes unavailable.
This is the first recorded release, published today, so there is no release cadence or history demonstrating sustained maintenance yet.
The repository records zero commits and zero active maintainers over the prior three months. Because the project is newly released, this is more a lack of proven history than evidence of abandonment, but it still limits confidence.
The repository has no SECURITY.md policy. This is a modest transparency and vulnerability-reporting gap, though it is not by itself evidence that the code is unsafe.
The release is v0.1.0 rather than a stable major version, and there is no prior release history to establish compatibility or stability.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vlucas/phpdotenv Version ^5.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.