registry / @central-icons-solid/round-filled-radius-3-stroke-1.5 / 1.2.2

@central-icons-solid/round-filled-radius-3-stroke-1.5@1.2.2

A collection of round filled Solid icons with 3px radius and 1.5px stroke width, designed for use in Solid applications.

AI Security Review

scanned 6d ago · by lpm-firewall-ai

No attack was identified. The install hook validates a service-specific license key against a fixed, package-aligned endpoint.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm installation runs license-check.js through preinstall.

Impact

License validation can prevent installation when the key is missing; no unrelated credential exposure or persistent mutation was identified.

Mechanism

The hook reads CENTRAL_LICENSE_KEY and submits it as bearer authentication with the package identity and version.

AI rationale

Direct inspection shows ordinary license authentication to the credential's intended service, not an unrestricted credential destination. The scanner fingerprint is unsupported by concrete malicious behavior in the inspected source.

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json activates license-check.js during preinstall and has no runtime self-dependency.
license-check.js sends the designated Central Icons license key only to the fixed Central Icons license endpoint.

@central-icons-solid/round-filled-radius-3-stroke-1.5@1.2.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code