“dotenv... but with defaults!”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(F₂Po)Md(Pa₂)
Referenced by 10 samples
- benign github.com-borisyankov-definitelytyped-v0.0.0-20260707142934-99572e353d5e.zip fetched
- benign gitlab.com-redhat-hummingbird-tools-v0.0.0-20260806141541-6c861fcd6a16.zip fetched
- benign github.com-tahowallet-extension-v0.67.1.zip fetched
- benign @cedarjs-cli-data-migrate-4.2.0.tgz fetched
- benign github.com-sage-carbon-v83.0.0+incompatible.zip fetched
- benign @cedarjs-cli-data-migrate-5.0.1.tgz fetched
- benign @cedarjs-web-server-5.0.3.tgz fetched
- benign github.com-sage-carbon-v77.0.1+incompatible.zip fetched
- benign github.com-definitelytyped-definitelytyped-v0.0.0-20240310170823-ad269d398919.zip fetched
- benign @cedarjs-cli-data-migrate-5.0.3.tgz fetched
Micro-behaviors
notable severity, 90% confident.
fs/path/config
References dotenv configuration file path
notable severity, 85% confident.
fs/path/sensitive
References a potentially sensitive .env file
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
Metadata
notable severity, 90% confident.
package/manifest
Package declares TypeScript types entry
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 95% confident.
package/files
Manifest sits at npm publish root
baseline severity, 100% confident.
package/quality
package.json defines a package name
baseline severity, 75% confident.
package/testing
JavaScript describe() test call
baseline severity, 100% confident.
package/testing/harness
Node.js test filename pattern
baseline severity, 100% confident.
package/testing/presence
File in a test directory
component severity, 90% confident.
file
File has 30 or more lines
component severity, 100% confident.
file/extension
File uses a source declaration extension
Identity
| SHA-256 | 16bfa0e7647c5f934f1d1632b056ffe4e418bd8ecb56b060d96626f8cf3e528d |
|---|---|
| Filename | dotenv-defaults-6.0.0.tgz |
| Package | dotenv-defaults |
| Version | 6.0.0 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/dotenv-defaults/-/dotenv-defaults-6.0.0.tgz |
Timeline
| First seen | 7 Jul 2026 07:37 UTC |
|---|---|
| First analyzed | 7 Jul 2026 07:39 UTC |
| Last analyzed | 13 Aug 2026 00:09 UTC |
| Last updated | 13 Aug 2026 00:09 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 73866 |
Not seeing what you expected? Let us know