Packaged fonts? (and regular audits?)

[Dave Johansen]

During the review of cppformat, it was pointed out that it contained a font
that should be removed because it's packaged with Fedora (
https://bugzilla.redhat.com/show_bug.cgi?id=1216279#c3 ). While working on
resolving this, I was looking into what package provided this font so I
could add the appropriate Requires to get the font and noticed that quite a
few packages also include this font:
yum provides "*/glyphicons-halflings-regular.ttf"

Is this ok? And if not, then is there some way that a set of fedora-review
style audits could be run on existing packages to verify that these sorts
of things didn't accidentally slip through the original review or were
introduced in an update without being noticed?

Thanks,
Dave