carbon/fontawesome

This release is usable but warrants caution before adoption. It has a clear GPL-3.0-or-later license, a coherent package and repository file tree, stable releases, recent publication activity, no registry deprecation, no install-time lifecycle scripts, and organizational repository backing. However, the linked repository shows zero commits and zero active maintainers in the last 3 months, the repository has very little visible popularity, no tests or changelog were detected, and security scanning and a security policy are absent. The package appears maintained through releases, but the lack of recent commit activity and limited verification hygiene create meaningful maintenance and transparency risk.

Latest 2.0.3

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository has 0 commits and 0 active maintainers in the last 3 months, despite a recent push and recent registry releases. This is a meaningful abandonment or release-process transparency concern.

Package scaffolding

A substantial README and GitHub Releases provide useful documentation and release transparency, compensating for the absence of packaged or repository tests and a changelog. The missing tests still reduce verification coverage somewhat, but this is not a severe risk for this small integration package.

Repo popularity

The repository has only 1 star, 0 forks, and 0 watchers, providing little community validation. Low popularity is supporting caution rather than a verdict because small, organization-backed packages can still be healthy.

Repo tooling

The repository uses Make and Composer build tooling, which supports reproducible project structure, but no security scanning tools are configured. The tooling is therefore useful but incomplete.

Security policy

No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though not as severe as an archived or deprecated project.