perf2k2/dotenv
Lightweight and fast alternative to phpdotenv without dependencies
58%
Total Score
caution
A solid, transparent package has had no release or repository activity for nearly four years.
Health Score Breakdown
The package and repository are owned by the same individual account, providing consistent ownership but no organizational backing or larger maintainer base.
The package has only one release, published nearly 4 years ago, with no releases in the last 12 months. This is the main maintenance and abandonment concern.
The repository has 0 stars and 0 forks, with only 1 watcher. This does not prove a defect, but it provides little evidence of broad community validation or support.
Composer and Make are used for builds, but no security scanning tools are present. For a small package this is a modest transparency gap rather than a severe risk.
The repository has no security policy. That weakens disclosure transparency, although the package's small scope and visible tests partly limit the concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.