@fortawesome/free-regular-svg-icons

Licensecaution

The artifact includes a license file and declares CC-BY-4.0 and MIT. The detected text also includes OFL-1.1, which is a minor licensing mismatch worth checking before redistribution.

Repo commit activitycaution

Only four commits were recorded in the last three months, although two maintainers were active and the package had a recent release. This indicates light but not collapsed activity.

Repo package mentioncaution

The linked repository neither matches the package name nor mentions it in its README, which creates some uncertainty about package-to-repository mapping. The organization and namespace match, and the repository is a known monorepo-style source tree, which partly compensates.

Repo toolingcaution

No build tool or security scanning tool was detected in the repository. This is a maintenance and transparency gap, though the package's long release history and organizational backing partly offset it.

Security policycaution

The repository has no security policy, leaving vulnerability reporting expectations unclear. This lowers transparency but is not severe enough to make the release unfit by itself.