How should this library be used when multiple dependencies of a project require it?

[krytie75]

I'm confused about how this library should be used in the context of a project that uses (for example) Composer for dependancy management.

Take the example of ProjectA which has dependencies ProjectB and ProjectC. Let's say all three projects expect to obtain config/secrets via phpdotenv.

Should there be three .env files, one for each individual project and each project seperately calls Dotenv::CreateImmutable()? If so, where should those .env files go? In the individual project root dirs (which in deployment would be in the vendor dir)?

Or there should just be one .env file in the root of ProjectA which contains all of the env vars for all three projects?

In either case, what about env var name collisions? I can never guarantee that two externally developed dependencies won't be expecting values with the same key in the .env file and as they're not my projects I can't change the names.

I've ended up here because research seems to suggest using environment variables is now considered a 'best practise' approach but I just can't understand how it can possibly work unless I can guarantee full control over anything in my project that might require the use of them. I haven't been able to find any information about how to handle this sort of scenario so I'm hoping someone can enlighten me.