registry / @central-icons-qwik/square-filled-radius-0-stroke-1 / 1.1.291

@central-icons-qwik/square-filled-radius-0-stroke-1@1.1.291

A collection of square filled Qwik icons with 0px radius and 1px stroke width, designed for use in Qwik applications.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The only install-time behavior is a package-aligned license validation request. No confirmed malicious attack surface was found in inspected source.

Static reason

One or more suspicious static signals were detected.

Trigger

npm preinstall runs node ./license-check.js; runtime import renders icon components

Impact

License key is sent to the vendor endpoint for validation; no exfiltration beyond the documented license check was identified.

Mechanism

license key validation and static Qwik SVG exports

AI rationale

The preinstall network call is disclosed and narrowly package-aligned for license validation, while the shipped code is otherwise static Qwik icon exports. The bundled skill file is inert package content with no unconsented installer mutation into a broad agent control surface.

Evidence

package.jsonlicense-check.jsREADME.mdindex.mjsIconAgenticCoding/index.mjsIconSecretPhrase/index.mjsskills/central-icons-qwik/SKILL.md

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

with false-positive risk.

@central-icons-qwik/square-filled-radius-0-stroke-1@1.1.291

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code