font-awesome

Build provenancecaution

No build attestation or trusted-publisher metadata is present, reducing publishing transparency, although this is a secondary concern for this established static asset package.

Release historycaution

The package has had no registry release in nearly ten years, with zero releases in the last 12 months. This is a meaningful staleness concern even though the upstream repository remains active.

Repo toolingcaution

No build tools or security scanning tools were detected, which weakens engineering and security transparency for a mature project.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.