@ahrefs/bs-dotenvnpm

Verdict

Looks abandoned

@ahrefs/bs-dotenv appears abandoned — its repository has been archived, no commits for over 6 years. There are no open issues. Plan a migration rather than waiting for a fix.

health 10/100

Why this verdict?

abandoned — No commits for over 365 days with unanswered issues piling up — or the registry marks it deprecated, or the repository is archived.

repository archived

Judged on 2026-09-14 from signal heuristics. How each verdict is decided

latest 2.0.0
licence MIT
stars 14
assessment attempted on 2026-09-14
registry checked yesterday
registry ↗
repository ↗

Vulnerabilities, end of life and next steps

Check a specific version for known advisories, documented mitigations and evidence-backed earlier-version options. Maintenance health is separate from vulnerability status.

Review remediation options →

Maintenance trends

Loading historical repository activity…

Signals · last 1 check

The first observation is recorded. Trend lines appear once at least two checks have data for the same signal.

Commits 90d

Open issues

Unanswered

Contributors

What the project says about itself

Build provenance — the latest release carries no provenance attestation. Source: the registry.
Publishers on the registry — 9. Source: the registry.
OpenSSF Scorecard — 2.9 / 10 on 2026-08-24. Source: OpenSSF, via deps.dev. A third party's view of security practice, not part of the health score.

Third-party facts checked on 2026-09-14; registry facts on every crawl.

State history 1

When	Change
2026-09-14	first verdict: abandoned

Badge

Drop this in your README. It re-renders itself as the verdict changes.

[![maintenance](https://isitdeadyet.dev/badge/npm/@ahrefs/bs-dotenv.svg)](https://isitdeadyet.dev/npm/@ahrefs/bs-dotenv)

Watch it

Get told when @ahrefs/bs-dotenv changes state, changes licence, or is deprecated — instead of finding out during an incident.

Free for up to 25 packages. Signing in is a link sent to your email — there is no password to choose.