jord-jd/dotenv-loader

Repo bus factorcaution

All recent commits came from one contributor, giving the project a complete single-contributor concentration. With individual rather than organizational backing, this creates a meaningful continuity risk.

Repo commit activitycaution

Only one commit was recorded in the past three months, indicating limited recent maintenance activity. The recent push is better than inactivity, but the small amount of work lowers confidence in sustained support.

Security policycaution

The repository has no security policy. For a library that loads environment variables, this is a transparency gap, though it is not evidence of a security flaw by itself.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-severity findings, but both action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene.