@fortawesome/react-fontawesome

Repo toolingcaution

The project uses TypeScript, Babel, tsup, and npm scripts for builds, but no security scanning tools were detected. The missing scanning is a modest governance gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

All 14 action references are unpinned, and one workflow grants top-level write permissions; these are workflow hygiene weaknesses. The audit found no untrusted checkout or script injection, and the trusted-publishing finding is informational.