mykehowells/dotenv

Registry deprecationdanger

Packagist marks the entire package as abandoned and names mykemeynell/env as the replacement, making this release unsuitable for a new dependency despite other healthy project signals.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single-contributor concentration has no visible organizational handoff support.

Release historycaution

The package is mature but has only five releases since 2016, with one release in the last 12 months; the recent release is positive, but the overall cadence is sparse.

Repo bus factorcaution

One contributor made all seven commits in the last three months, so maintenance depends entirely on a single active person.

Repo toolingcaution

The project uses Composer, but no security-scanning tools were detected, leaving its security checks less transparent.