npm package report

Is dotenv-expand safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/dotenv-expand

npm packagelast checked 2026-09-19

dotenv-expand · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 9 graph-tracked dependencies · provenance: none found

SIGNALS

All signals clearclearOK

No known-malicious match, advisory, commit-level finding or anomaly.

DEPENDENCIES

dotenv@^14.1.0clean

@hapi/lab@^24.5.1clean

lab@^13.0.1clean

should@^11.2.1clean

standard@^16.0.4clean

standard-version@^9.5.0clean

tap@^16.3.0clean

typescript@^4.5.4clean

@types/node@^17.0.8clean

PACKAGE dotenv-expandECOSYSTEM npmDECISION ALLOW

Weekly downloads

71.8M

GitHub stars

Centrality tier

tier 1

Build provenance

none found

Direct dependencies

Baked snapshot · run a live check for the current verdict · browse all packages