@fortawesome/free-solid-svg-icons

Build provenancecaution

No build attestation or staged publishing is reported, leaving publication provenance less transparent than it could be.

Licensecaution

The package declares CC-BY-4.0 and MIT and includes a license file, but the detected text also contains OFL-1.1, which the declaration does not cover.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, so package-to-repository ownership is less directly transparent; the monorepo context partly explains the name mismatch.

Repo toolingcaution

No build tool or security-scanning tool was detected, which limits evidence of automated project hygiene.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear.