registry / @central-icons-solid/round-filled-radius-1-stroke-1 / 1.2.2

@central-icons-solid/round-filled-radius-1-stroke-1@1.2.2

A collection of round filled Solid icons with 1px radius and 1px stroke width, designed for use in Solid applications.

AI Security Review

scanned 6d ago · by lpm-firewall-ai

No confirmed attack surface was identified. The automatic network operation validates a designated product license key at a fixed service endpoint.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm preinstall invokes license-check.js.

Impact

Installation requires a license key and contacts the licensing service; no malicious mutation or unrelated credential disclosure was identified.

Mechanism

The hook sends the license key as bearer authentication and the package name and version as JSON, then checks the validation response.

AI rationale

Direct inspection shows ordinary license authentication to a fixed product endpoint and SVG component exports. The scanner fingerprint does not establish malicious behavior, and source inspection found no concrete attack supporting a warning or block.

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json runs license-check.js during preinstall and has no runtime self-dependency.
license-check.js reads only CENTRAL_LICENSE_KEY and authenticates to the fixed Central Icons license endpoint.

@central-icons-solid/round-filled-radius-1-stroke-1@1.2.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code