Is dotenv-vault safe to use?

dotenv-vault has no known vulnerabilities on the latest version (1.27.0). DepScope rates its health at 66/100 (moderate risk).

What is the latest version of dotenv-vault?

The latest version of dotenv-vault is 1.27.0, released 2025-06-25.

Does dotenv-vault have known vulnerabilities?

No known vulnerabilities on the latest version of dotenv-vault.

Is dotenv-vault deprecated?

No, dotenv-vault is actively maintained. Latest release: 1.27.0 (2025-06-25).

What are alternatives to dotenv-vault?

Popular alternatives to dotenv-vault in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does dotenv-vault use?

dotenv-vault is licensed under MIT.

dotenv-vault

npmv1.27.0

A secrets manager for .env files – from the same people that pioneered dotenv.

License MITpermissive86 versions1 maintainers8 deps39,811 weekly dl

dotenv-org/dotenv-vault

/ 100

Health

use with caution

[email protected] low health (66/100) — consider alternatives

Moderate health score (66/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

6/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (8)

@oclif/core @oclif/plugin-help @oclif/plugin-not-found @oclif/plugin-update @oclif/plugin-warn-if-update-available axios chalk dotenv

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/dotenv-vault