Companion for .env files
58%
Total Score
67
75
75
The latest release was published about 2 years and 7 months ago, with no releases in the last 12 months. This indicates an inactive release cadence, though the package has a history of 12 releases since 2019.
There were no commits and no active maintainers in the last 3 months. Combined with the old latest release, this is meaningful evidence of stalled maintenance.
There was no issue or pull-request activity in the last month, while 3 pull requests remain open. This provides no evidence of current responsiveness and modestly increases maintenance risk.
The repository has 0 stars and 3 forks, providing little supporting evidence of broad adoption. Popularity is only supporting evidence, so this does not outweigh the maintenance signals.
The repository uses Composer, but no security scanning tools were detected. For a package that handles environment files and generates credentials or certificates, this is a hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/dotenv Version ~3.4 || ~4.0 || ~5.0 | — | — |
symfony/console Version ~3.0 || ~4.0 || ~5.0 | — | — |
symfony/process Version ~3.0 || ~4.0 || ~5.0 | — | — |
jackiedo/dotenv-editor Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.