riivault_

dotenv

npm package · declared by 149 of 2,343 sampled repositories · graph computed 2026-08-24

Counted from the runtime dependencies public repositories declare — not the resolved tree. A transitive dependency is a consequence; a declared one is a choice. Development dependencies are excluded because they repeat across every project in a language regardless of what is being built.

Declared with

ranked by association, not by count
Declared withRepositoriesvs chance
express33 of 2,3430.55
cors16 of 2,3430.50
@google/genai8 of 2,3430.45
@anthropic-ai/sdk11 of 2,3430.44
axios26 of 2,3430.42
openai17 of 2,3430.42
jsonwebtoken9 of 2,3430.39
better-sqlite313 of 2,3430.35
node-fetch9 of 2,3430.34
@modelcontextprotocol/sdk22 of 2,3430.33
chokidar8 of 2,3430.33
zod36 of 2,3430.32
js-yaml9 of 2,3430.28
chalk11 of 2,3430.28
uuid11 of 2,3430.28
commander14 of 2,3430.27
ws10 of 2,3430.23
lucide-react16 of 2,3430.19
tailwind-merge10 of 2,3430.13
class-variance-authority8 of 2,3430.12

Every pair above is counted from the same evidence: repo manifest.

Used instead

candidates · shares a neighbourhood and refuses to co-occur

No alternative measured. A pair qualifies only if it shares a neighbourhood and then fails to appear together against an expectation that it would — and almost everything that shares a neighbourhood does appear together. That is the test working, not a gap in the data: similarity alone would list this tool’s closest neighbours as alternatives, and most of them are things it is used with.