Version 17.2.4 • License BSD-2-Clause
One-Line Verdict
"Stable for production use."
Healthy
Actively Maintained
0 CVE History
No known CVEs.
80.3 KB
Light footprint.
91,883,806
Highly Trusted
Package Payload
0 Direct
Clean dependency structure.
Cold-Start Impact
+1 ms
Estimated execution overhead on standard hardware.
Current Threat Level
Verified Stable
"No known vulnerabilities detected. Version 17.2.4 is stable."
Accuracy Protocol
Scanned against OSV.dev (Google Open Source) databases. Last Deep-Scan: 2026.
Is dotenv too heavy? Compare it with these industry standards:
"Loads environment variables from .env file"
dotenv is used to facilitate high-performance Node.js workflows. It provides a slim footprint of 80.3 KB on disk.
# Install via NPM
npm install dotenv
# Install via Yarn
yarn add dotenv
You are currently viewing a proprietary security audit for dotenv on PAudit. We aggregate global databases to provide a safety rating of 100/100.
Run npm install dotenv. This installs version 17.2.4 and adds 0 direct dependencies to your project.
Yes, dotenv records 91,883,806 weekly downloads, making it a Highly Trusted part of the ecosystem.