registry / @central-icons-solid/round-filled-radius-1-stroke-1 / 1.1.316

@central-icons-solid/round-filled-radius-1-stroke-1@1.1.316

A collection of round filled Solid icons with 1px radius and 1px stroke width, designed for use in Solid applications.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No confirmed malicious attack surface. Installation performs a transparent vendor license validation using the explicitly named license-key environment variable.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation runs the preinstall hook.

Impact

The provided license key is disclosed to the vendor for validation.

Mechanism

License-key validation request to the vendor.

AI rationale

The automatic network request is a package-aligned license check, limited to a single documented license-key variable and fixed metadata. Source inspection found no credential harvesting beyond that key, file mutation, persistence, remote payload execution, or agent-control changes.

Evidence

license-check.js

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with medium false-positive risk.

Evidence for AI clean decision

The package runs license-check.js automatically during preinstall.
The preinstall script sends CENTRAL_LICENSE_KEY as a Bearer credential to the vendor license endpoint.

@central-icons-solid/round-filled-radius-1-stroke-1@1.1.316

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code