staabm/secure_dotenv

Repo commit activitycaution

There were no commits from active maintainers in the last 3 months, which is a maintenance concern, although the recent release history provides compensating evidence of continued project activity.

Security policycaution

No security policy is present, leaving vulnerability-reporting expectations less explicit for a library that handles encrypted environment configuration.

Workflow auditcaution

All five workflows were analyzed with no high-confidence findings or dangerous trigger-and-sink combinations, but all 12 action references are unpinned, weakening build reproducibility and update integrity.