During the review of cppformat, it was pointed out that it contained a font that should be removed because it's packaged with Fedora ( https://bugzilla.redhat.com/show_bug.cgi?id=1216279#c3 ). While working on resolving this, I was looking into what package provided this font so I could add the appropriate Requires to get the font and noticed that quite a few packages also include this font:
yum provides "*/glyphicons-halflings-regular.ttf"

Is this ok? And if not, then is there some way that a set of fedora-review style audits could be run on existing packages to verify that these sorts of things didn't accidentally slip through the original review or were introduced in an update without being noticed?

Thanks,
Dave