koel/dotenv-editor

Release historycaution

Only two releases have appeared in about 15 months, with one release in the last 12 months and a median interval of about 273 days. This indicates a thin release cadence, though the package is still relatively young.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of ongoing maintenance, despite a recent release and push elsewhere in the collected data.

Repo popularitycaution

The repository has 1 star, 1 fork, and 0 watchers. Popularity is only supporting evidence, but these very small numbers provide little external validation.

Security policycaution

No security policy was found in the repository. This is a transparency gap for a package that edits environment files, although it is not evidence of a security defect by itself.

Workflow auditcaution

Both workflows were fully analyzed with no high- or medium-confidence findings, no untrusted checkouts, and no script injection. However, all 5 of 5 action references are unpinned, leaving avoidable workflow supply-chain hygiene risk.