Is vlucas/phpdotenv safe to use?

vlucas/phpdotenv has no known vulnerabilities on the latest version (v5.6.3). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of vlucas/phpdotenv?

The latest version of vlucas/phpdotenv is v5.6.3, released 2025-12-27.

No known vulnerabilities on the latest version of vlucas/phpdotenv.

No, vlucas/phpdotenv is actively maintained. Latest release: v5.6.3 (2025-12-27).

DepScope has no curated alternatives for vlucas/phpdotenv at this time.

vlucas/phpdotenv is licensed under BSD-3-Clause.

composervv5.6.3

Loads environment variables from `.env` to `getenv()`, `$_ENV` and `$_SERVER` automagically.

License BSD-3-Clausepermissive81 versions2 maintainers7 deps

/ 100

Health

safe to use

vlucas/[email protected] is safe to use (health: 65/100)

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

10/15

community

Vulnerabilities

none known

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

1

Primary author dominance

100%

GitHub stars

13,536

single active maintainer 3msingle author dominance

Dependencies (7)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/composer/vlucas/phpdotenv

Last updated · 2025-12-27T19:49:13+00:00