omenejoseph/dynamic-env

Release historydanger

There has been only one release, published nearly four years ago, with no releases in the last 12 months. That is strong evidence of limited ongoing maintenance for a package handling environment-secret synchronization.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, while its last push was nearly four years ago. This materially raises abandonment and compatibility risk.

Repo popularitycaution

The repository has 1 star, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these figures provide little external evidence of sustained use or review.

Security policycaution

No security policy was found in the repository. Because this package handles AWS secrets and environment values, the missing disclosure and response process is a meaningful transparency gap.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted-trigger sinks, but both of its action references are unpinned. That is a modest reproducibility and supply-chain hygiene weakness, not a severe workflow risk.