registry / @central-icons-qwik/round-filled-radius-2-stroke-1.5 / 1.1.317

@central-icons-qwik/round-filled-radius-2-stroke-1.5@1.1.317

A collection of round filled Qwik icons with 2px radius and 1.5px stroke width, designed for use in Qwik applications.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. Installation performs a package-aligned license validation using an explicitly named license-key variable.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install invokes the preinstall script.

Impact

Installation can fail without the license key and discloses that key to the configured vendor endpoint.

Mechanism

Posts the supplied license key to the vendor license endpoint.

AI rationale

The automatic license check is a privacy and availability consideration, but its network request is limited to the package's named license credential and package/version metadata. Static inspection found no exfiltration beyond that check, persistence, project mutation, or code-execution primitives.

Evidence

license-check.js

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The install lifecycle runs license-check.js automatically.
The checker sends the named CENTRAL_LICENSE_KEY as bearer authentication to the vendor license endpoint.

@central-icons-qwik/round-filled-radius-2-stroke-1.5@1.1.317

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code