tyhpdef/vlucas-phpdotenv-impl

Release historycaution

This is the first release, published today, so there is no track record for release continuity or maintenance yet. That is a genuine maturity gap, though it does not by itself indicate abandonment.

Repo commit activitycaution

There were no commits or active maintainers in the past three months, but the package is only one day old, so this currently shows limited history rather than clear abandonment.

Repo toolingcaution

The repository uses Composer, which fits the package ecosystem, but no security-scanning tool was detected. That is a modest transparency and assurance gap.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations unspecified. This is a hygiene concern rather than evidence that the package is unsafe.