rfussien/dotenv

Release historydanger

Only one release exists, and there have been no releases in roughly 9 years. This is strong evidence of abandonment for a package intended as an ongoing dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and leaving little evidence of current maintenance.

Repo popularitycaution

The repository has only 3 stars and no forks, offering little supporting evidence of broad community review or adoption. Low popularity alone does not establish that the package is unsafe.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. That leaves automated coverage for dependency and repository security issues limited.

Security policycaution

The repository has no security policy. This is a transparency and maintenance gap, although it is less significant than the evidence of prolonged inactivity.