lucide-react-native

Licensecaution

The package declares ISC and includes license files, but artifact detection also identifies MIT text, so the licensing presentation is slightly inconsistent.

Security policycaution

The repository has no published security policy, leaving disclosure and response expectations less explicit despite the project using Dependabot.

Workflow auditcaution

All 30 workflows were analyzed, all 195 action references are pinned, and all workflows use read-only permissions. High-confidence template-injection findings and secrets inheritance remain workflow hygiene concerns, while the low-confidence cache findings do not materially change the assessment.