@expo-google-fonts/material-symbols

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package. The large repository tree indicates a monorepo, which partly explains the mismatch, but package identity is still less explicit than ideal.

Repo toolingcaution

The repository uses TypeScript build tooling, but no security scanning tools were detected, leaving a modest transparency and assurance gap.

Security policycaution

No repository security policy was found, reducing clarity about how consumers should report vulnerabilities, though this is a hygiene concern rather than evidence of abandonment.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the audit reports high-confidence template injection plus trusted-publishing findings. No untrusted checkout or script-injection path was found, so these are workflow hygiene concerns rather than standalone severe risk.