Is dot-env safe to use?

dot-env has no known vulnerabilities on the latest version (0.0.1). DepScope rates its health at 42/100 (high risk).

What is the latest version of dot-env?

The latest version of dot-env is 0.0.1, released 2013-11-22.

Does dot-env have known vulnerabilities?

No known vulnerabilities on the latest version of dot-env.

Is dot-env deprecated?

No, dot-env is actively maintained. Latest release: 0.0.1 (2013-11-22).

What are alternatives to dot-env?

Popular alternatives to dot-env in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does dot-env use?

License information for dot-env is not declared in the registry metadata.

dot-env

npmv0.0.1

An environment variable loader

2 versions1 maintainers0 deps

git://github.com/supershabam/dot-env

/ 100

Health

use with caution

Package name resembles 'dotenv' (possible typosquat). Verify the name is what you intend before installing.

Possible typosquat of 'dotenv'

Health breakdown0 – 100

0/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

0.4 KBminified

0.3 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

0/10untyped

No type definitions available

⚠ Possible typosquat

Name is close to a popular package. Targets:

dotenv (missing_or_extra_char dist 1)

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/dot-env