registry / @central-icons-qwik/round-outlined-radius-2-stroke-1 / 1.1.318

@central-icons-qwik/round-outlined-radius-2-stroke-1@1.1.318

A collection of round outlined Qwik icons with 2px radius and 1px stroke width, designed for use in Qwik applications.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

Installing the package runs a license checker that transmits an environment-held license key. This is an automatic credential egress surface, although it is limited to the product-specific key and apparent vendor endpoint.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation invokes the preinstall lifecycle hook.

Impact

The license key is disclosed to centralicons.com whenever installation runs.

Mechanism

POSTs CENTRAL_LICENSE_KEY as Bearer authentication for license validation.

AI rationale

The source establishes automatic license-key transmission but does not establish broader credential theft, persistence, or payload execution. Downgrade to a warning rather than blocking because the endpoint and variable are product-specific and the code is unobfuscated.

Evidence

package.jsonlicense-check.js

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.

Evidence for warning

The preinstall hook automatically runs license-check.js.

@central-icons-qwik/round-outlined-radius-2-stroke-1@1.1.318

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code