registry / @central-icons-qwik/round-outlined-radius-3-stroke-1 / 1.1.291

@central-icons-qwik/round-outlined-radius-3-stroke-1@1.1.291

A collection of round outlined Qwik icons with 3px radius and 1px stroke width, designed for use in Qwik applications.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The only confirmed install-time behavior is a license check that posts the provided CENTRAL_LICENSE_KEY to a Central Icons API. Runtime package content is an icon library of Qwik SVG component exports.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install runs package.json preinstall; application import loads index.mjs/icon modules

Impact

License key is disclosed to the vendor endpoint by design; no concrete malicious behavior established.

Mechanism

license validation plus static icon component exports

AI rationale

The preinstall network request is a package-aligned license check using an explicit environment variable, and source inspection did not show credential harvesting, remote code execution, persistence, destructive actions, or agent control-surface mutation. Scanner hits in index.mjs are icon names/exports and static SVG component code, not attack behavior.

Evidence

package.jsonlicense-check.jsindex.mjsIconGenderFemale/index.mjsIconBluetooth/index.mjsIconPeace/index.mjs

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

@central-icons-qwik/round-outlined-radius-3-stroke-1@1.1.291

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code