The crate dotenv [has been abandoned](https://rustsec.org/advisories/RUSTSEC-2021-0141.html). Drop-in replacement dotenvy seems an obvious alternative.