Vulnerability Database · npm · Package report
envfile: vulnerability history, versions and safety
envfile is a package in the npm ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the npm ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on envfile 7.1.0 i
Updated on 23 Oct 2026
Good news: 7.1.0, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Slowing
- Popularity Niche
- Community Quiet
What to do: Stay on 7.1.0 or newer. This can change: a vulnerability disclosed tomorrow can affect 7.1.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release 7.1.0 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Depended on by 64 packages i
- Stars 63 i
- OpenSSF scorecard 4/10 i
- Last release 33 months ago i
- Licence Artistic-2.0 i
Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for envfile, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- 7.1.0-next.1710511744.355882c72377e1ca12411e9661963e6d23cf8067 15 Mar 2024
- 7.1.0-next.1709117147.dc6083d00c810cc6c64bba3a3e9ba728796b6976 28 Feb 2024
- 7.1.0 29 Dec 2023
- 7.1.0-next.1703892181.6abd59fa202a0d1cac58adaf6ad430a4dd0d84bd 29 Dec 2023
- 7.0.0 24 Nov 2023
- 7.0.0-next.1700838141.2db809294149b9cc2b2c567963eb4d4a0836b5a6 24 Nov 2023
- 6.22.0 23 Nov 2023
- 6.22.0-next.1700712299.86e74f790c5a1e056ed480d9be6ebb04aac6b991 23 Nov 2023
- 6.21.0-next.1700554457.0412c0363e7505d1492017408ff83304328366a4 21 Nov 2023
- 6.21.0 21 Nov 2023
- 6.20.0-next.1699989059.04c24086f5bc395dc49b37abcaf4fed427418000 14 Nov 2023
- 6.20.0 14 Nov 2023
- 6.19.0-next.1699887700.07ffe496bd08fc295e13d46ebb0441aceb70f227 13 Nov 2023
- 6.19.0 13 Nov 2023
- 6.18.0-next.1662657721.53e31c8289c63d86bd589a5c1b801fa1e218cdb3 08 Sep 2022
- 6.18.0 08 Sep 2022
- 6.17.0-next.1662655645.f39a8f4a7ef707e3bd008e3c4ec2eff5ff69ee9a 08 Sep 2022
- 6.17.0 29 Jul 2021
- 6.17.0-next.1627591233.8e7eeb73de5f2ee41f800ac34773ae40d231bcc2 29 Jul 2021
- 6.16.0-next.1627590576.691c52879143bf58dfb49d6b97b74904605da791 29 Jul 2021
- 6.16.0 29 Jul 2021
- 6.16.0-next.1627590374.66973144739ce51cb7305e96753b6b06861a664e 29 Jul 2021
- 6.15.0 27 Jul 2021
- 6.15.0-next.1627422292.d6669b2a9c512ece66cbbfa85e370a1826df4738 27 Jul 2021
- 6.14.0-next.1604238904.1b2b1fc47af709e64499a57fb62527db8641857b 01 Nov 2020
- 6.14.0-next.1603631548.b18e905c5701959a05fdb02f47d6d4edcafd2b34 25 Oct 2020
- 6.14.0-next.1603628145.edd347279f97bbec46c6465ede2f1f22ce278f8f 25 Oct 2020
- 6.14.0-next.1603017484.f066a42923be899eba9b524d5c7f2be68a16ee0e 18 Oct 2020
- 6.14.0-next.1602409416.da0d5978bbab6b433a7e0f9530ada93efde80526 11 Oct 2020
- 6.14.0-next.1601800625.91d74bad678347b16125b72b3d5811a1a432d370 04 Oct 2020
- 6.14.0-next.1601798784.d2e860a82f9d4b6ca6bd4cb3d5b079246a36b957 04 Oct 2020
- 6.14.0-next.1601212069.3e59b80a4c3946207309e2f06205510ba277c5e8 27 Sep 2020
- 6.14.0-next.1600604552.6c1608103814b158a1af8b62af87ac2047c9aca2 20 Sep 2020
- 6.14.0-next.1599999670.409db26e12f617e3812b0465917d9c9237053267 13 Sep 2020
- 6.14.0-next.1599998659.fa66ba3765145530937efedf3b11e42067d1f33e 13 Sep 2020
- 6.14.0-next.1599994398.b45cec45d89e79c385b81510ac650fe43ca9fb55 13 Sep 2020
- 6.14.0-next.1599397993.8b7325bb6c6ab1492e87f5003b47b012d513ca95 06 Sep 2020
- 6.14.0-next.1599212146.cd87784ba94b56ecf30e64f850016dc468847c41 04 Sep 2020
- 6.14.0 04 Sep 2020
- 6.14.0-next.1599212053.ad2a932f15c8d5830c35da015b610680b0844711 04 Sep 2020
- 6.13.0 17 Aug 2020
- 6.13.0-next.1597694139.4a8154e06c028a3ef7b3f4d398d41605b4683ef8 17 Aug 2020
- 6.12.0 04 Aug 2020
- 6.12.0-next.1596514069.88c9ba6cf32a11619b6c4137126a118002f8114f 04 Aug 2020
- 6.11.0 21 Jul 2020
- 6.11.0-next.1595352848.5407f1b9ff5542b6345949dc83cf3874884aa959 21 Jul 2020
- 6.10.0 21 Jul 2020
- 6.10.0-next.1595344408.b2d921de29861ff74b7e4d96ae37c1642c33ae26 21 Jul 2020
- 6.9.0 03 Jul 2020
- 6.9.0-next.1593753290.da9dbe72de0b855ba20e1acf004c30114e222da5 03 Jul 2020
- 6.8.0 25 Jun 2020
- 6.8.0-next.1593052912.9eb99278fb8a781eba7f7230ca3f740920e02d0d 25 Jun 2020
- 6.7.0-next.1593045731.f66b4ac7a329b52245c84cbac7b2d555ef58f82c 25 Jun 2020
- 6.7.0 21 Jun 2020
- 6.7.0-next.1592739056.16b2c1f4462d85c4baa1fd6037461cb7608da55e 21 Jun 2020
- 6.6.0 20 Jun 2020
- 6.6.0-next.1592691740.e9748e14c8f6f0c0a4b92dfd9fcf2159a052c990 20 Jun 2020
- 6.5.0 19 Jun 2020
- 6.5.0-next.1592607576.d7a6d9433d1525157baf0a10cefd5ed02db931de 19 Jun 2020
- 6.4.0 10 Jun 2020
- 6.4.0-next.1591794061.a5a45d0ac4dfaa44263b14ba55710aa1dde53bbd 10 Jun 2020
- 6.3.0 10 Jun 2020
- 6.3.0-next.1591776910.779d3b252e84168fb20aaac5b93962944b96290b 10 Jun 2020
- 6.2.0 21 May 2020
- 6.2.0-next.1590072917.15e54d1d36af899d93cf51368ddcaa5793a2b025 21 May 2020
- 6.1.0 21 May 2020
- 6.1.0-next.1590036409.838ccb6f7de374529a8ff25ef8e635d841f29d5b 21 May 2020
- 6.0.0 20 May 2020
- 6.0.0-next.1590000496.1ad49aa4471282059c82b5403dbcc754c9a2ab9b 20 May 2020
- 5.2.0 12 May 2020
- 5.2.0-next.1589252209.92f7e74992a8d0fe023fa7fbfb9202e917bf5c7e 12 May 2020
- 5.1.0 04 May 2020
- 5.1.0-next.1588596360.52e19468135d2d1b14ee3b644a50264c3b7a01d0 04 May 2020
- 5.0.0 25 Mar 2020
- 5.0.0-next.1585176116.c034b4f66e49745083d4b6a51d31e62f30bdc335 25 Mar 2020
- 4.5.0 09 Dec 2019
- 4.5.0-next.1575879463.51d9e506cbe4c3eaf902a30312e49bfa94598f54 09 Dec 2019
- 4.4.0 01 Dec 2019
- 4.4.0-next.1575169981.95ffff9e1ef1156b7f247d4af0aa17a50162dc1e 01 Dec 2019
- 4.3.0 30 Nov 2019
- 4.3.0-next.1575146291.5a3e31a10217187ca9a2a138877b47ebf9b72ee8 30 Nov 2019
- 4.2.0 30 Nov 2019
- 4.2.0-next.1575141535.f6e958394da063ca3de5210ab88c4e53236f4dde 30 Nov 2019
- 4.1.0-next.1574658061.82be77cfdc6cd53b8c993b02d41f0e39a19a377c 25 Nov 2019
- 4.1.0-next.1574647724.66d353e5653cca3ad04210a32cb1113177a65423 25 Nov 2019
- 4.1.0 18 Nov 2019
- 4.1.0-next.1574046877.9bbdccdba559c29d95464a1f69e8d78ebe14738b 18 Nov 2019
- 4.0.0 18 Nov 2019
- 4.0.0-next.1574045988.e847b874c22dd3e805e4ecffd7af130d189d4ac5 18 Nov 2019
- 3.1.0-next.1573704665.1861a6d705f26bfa1725e4da7829e99cc9ddaccb 14 Nov 2019
- 3.1.0-next.1573694247.bf4e992833723173a3d59bda922af276ce697462 14 Nov 2019
- 3.1.0-next.1573687757.0a0358d3d8bb26398682c859329c600e8187b387 13 Nov 2019
- 3.1.0-next.1573614855.98f0cbe3fdbd218da2936a1400ce2d5fe16854f1 13 Nov 2019
- 3.1.0 13 Nov 2019
- 3.1.0-next.1573609233.8c6a674bc5662d297e1a002d607005ff0522ba95 13 Nov 2019
- 3.0.0 01 Jan 2019
- 2.3.0 25 Jan 2018
- 2.2.0 25 Jan 2018
- 2.1.1 27 May 2016
- 2.1.0 27 May 2016
- 2.0.1 14 Jan 2016
- 2.0.0 14 Jan 2016
- 1.0.0 08 May 2013
All 103 versions Vulert tracks for this package. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
Other ways into the data
03 Vulnerabilities
Recorded vulnerabilities for envfile
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About envfile
Is envfile safe to use?
Vulert has no vulnerabilities on record for envfile in npm at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is envfile's Vulert package health score?
Vulert scores envfile 59/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of envfile affected?
No. 7.1.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of envfile should I use?
7.1.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does envfile have?
0 vulnerabilities are recorded for envfile in the npm ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new envfile vulnerabilities disclosed?
0 vulnerabilities were recorded for envfile in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of envfile are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor envfile for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the envfile version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.