registry / @central-icons-solid/round-outlined-radius-0-stroke-1 / 1.1.291

@central-icons-solid/round-outlined-radius-0-stroke-1@1.1.291

A collection of round outlined Solid icons with 0px radius and 1px stroke width, designed for use in Solid applications.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

No confirmed malicious attack surface. Install-time code performs a first-party license check, and runtime code exports static Solid SVG icons.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install runs preinstall license-check.js; imports render icon components

Impact

License key is sent to the vendor license endpoint; no evidence of credential harvesting, persistence, or payload execution.

Mechanism

package-aligned license validation and static icon exports

AI rationale

The suspicious signals are explained by a commercial icon package enforcing a license key during preinstall and shipping static icon components plus optional package-owned assistant guidance. Source inspection did not show exfiltration beyond the documented license endpoint, file/system mutation, remote code execution, persistence, or install-time AI-agent control-surface writes.

Evidence

package.jsonlicense-check.jsindex.jsxsrc/CentralIconBase.tsxREADME.mdskills/central-icons-solid/SKILL.mdIconBomb/index.tsx

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

@central-icons-solid/round-outlined-radius-0-stroke-1@1.1.291

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code