Loading npm security reports…
A collection of round filled Solid icons with 3px radius and 1.5px stroke width, designed for use in Solid applications.
No attack was identified. The preinstall hook checks the supplied license key with the package’s license service.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgpackage.json runs license-check.js during preinstall.
package.jsonView on unpkg · L13Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkglicense-check.js reads CENTRAL_LICENSE_KEY and sends it to the package’s license-check endpoint with this package and version.
license-check.jsView on unpkg · L1The source contains no confirmed attack behavior; the credential is sent to the package-aligned license service for validation.
license-check.jsView on unpkg · L13This report applies to @central-icons-solid/round-filled-radius-3-stroke-1.5@1.2.8.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L14package.json runs license-check.js during preinstall.
package.jsonView on unpkg · L13license-check.js reads CENTRAL_LICENSE_KEY and sends it to the package’s license-check endpoint with this package and version.
license-check.jsView on unpkg · L1The source contains no confirmed attack behavior; the credential is sent to the package-aligned license service for validation.
license-check.jsView on unpkg · L13Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkg