justbetter/dotenv

Release historycaution

The package has six releases since September 2020 but none in the last 12 months; the latest release was nearly two years ago, which raises maintenance concerns.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Repo toolingcaution

The project uses Composer, but no security scanning tools are present. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear for a package that handles environment configuration.