laxity7/dotenv

Release historycaution

The package has five releases over about six years, with one release in the last 12 months and a median interval of about 464 days. This indicates slow maintenance rather than clear abandonment, but limits confidence in frequent fixes.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although a release occurred recently, the lack of current repository activity is a meaningful maintenance concern.

Repo toolingcaution

The repository uses Make and Composer, but no security scanning tools were detected. Build tooling is present, while the missing automated security checks modestly reduce assurance.

Workflow auditcaution

The single workflow was fully analyzed with no injection, untrusted-checkout, or severity-rated findings. However, all four action references are unpinned, leaving build inputs less reproducible and increasing dependence on mutable action versions.