registry / @central-icons-qwik/round-outlined-radius-0-stroke-2 / 1.1.296

@central-icons-qwik/round-outlined-radius-0-stroke-2@1.1.296

A collection of round outlined Qwik icons with 0px radius and 2px stroke width, designed for use in Qwik applications.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

Preinstall performs a bounded license validation request. No confirmed malicious or agent-control attack surface is established.

Static reason

One or more suspicious static signals were detected.

Trigger

npm preinstall

Impact

License credential is disclosed to the package-aligned validation service.

Mechanism

Posts the configured Central license key to a license-check endpoint

AI rationale

The only active behavior is a package-specific license check using a dedicated environment variable and package/version metadata. The remaining inspected source is static Qwik SVG exports and inert usage documentation.

Evidence

package.jsonlicense-check.jsindex.mjsIconAgenticCoding/index.mjsskills/central-icons-qwik/SKILL.md

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with medium false-positive risk.

Evidence for AI clean decision

package.json runs license-check.js during preinstall
license-check.js reads CENTRAL_LICENSE_KEY and POSTs it as Bearer auth
skills/central-icons-qwik/SKILL.md is packaged agent-facing documentation

Evidence against

license request body is limited to this package name and version
No shell, filesystem, dynamic-code, native-loading, or persistence APIs found
index.mjs and component modules export Qwik SVG icon components
Packaged skill only documents icon lookup and imports; it performs no mutation

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 2,080 file(s), 4.68 MB of source, external domains: centralicons.com, www.w3.org

Source & flagged code

1 flagged

package.jsonView file

Lines 1-26json

2 "name": "@central-icons-qwik/round-outlined-radius-0-stroke-2",

3 "version": "1.1.296",

4 "license": "SEE LICENSE IN LICENSE.md",

5 "homepage": "https://iconists.co/central",

6 "sideEffects": false,

7 "type": "module",

8 "module": "./index.mjs",

9 "types": "./index.d.ts",

10 "exports": {

11 ".": { "types": "./index.d.ts", "import": "./index.mjs" },

12 "./*": { "types": "./*/index.d.ts", "import": "./*/index.mjs" }

13 },

14 "files": ["**/*.mjs", "**/*.map", "**/*.d.ts", "**/*.md", "icons-index.json", "license-check.js"],

15 "scripts": {

16 "preinstall": "node ./license-check.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L16

17 "build": "bun build.ts",

18 "prepublishOnly": "npm run build",

19 "lint": "biome format --write ."

20 },

21 "peerDependencies": { "@builder.io/qwik": ">=1.5" },

22 "devDependencies": { "@types/node": "^24", "@builder.io/qwik": "^1", "@biomejs/biome": "^2", "typescript": "^5" },

23 "keywords": ["qwik", "icons", "svg", "central-icons", "icon-pack"],

24 "author": "Iconists"

25}

Source & flagged code

1 flagged · loading source

package.jsonView file

•scripts.preinstall = node ./license-check.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

Findings

1 High2 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @central-icons-qwik/round-outlined-radius-0-stroke-2@1.1.296.

See version security history for other recorded verdicts.

Review the evidence and your use of @central-icons-qwik/round-outlined-radius-0-stroke-2@1.1.296 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-07-15 12:54:31.766Z (UTC).