registry / @central-icons-qwik/square-outlined-radius-0-stroke-2 / 1.1.291

@central-icons-qwik/square-outlined-radius-0-stroke-2@1.1.291

A collection of square outlined Qwik icons with 0px radius and 2px stroke width, designed for use in Qwik applications.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

Install-time script performs vendor license validation using an explicit CENTRAL_LICENSE_KEY environment variable. This is package-aligned network behavior, not a confirmed malicious attack surface.

Static reason

One or more suspicious static signals were detected.

Trigger

npm preinstall during package installation

Impact

CENTRAL_LICENSE_KEY is sent to the vendor license endpoint; no broader credential harvesting or payload execution confirmed.

Mechanism

HTTPS license key validation

AI rationale

The only meaningful risky primitive is install-time license validation, which is narrowly aligned to the commercial icon package and uses a named license variable. Source inspection did not identify a concrete malicious chain, so the scanner hints appear noisy for this package.

Evidence

package.jsonlicense-check.jsindex.mjsIconAgenticCoding/index.mjsIconPassword/index.mjsicons-index.json

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with false-positive risk.

@central-icons-qwik/square-outlined-radius-0-stroke-2@1.1.291

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code