registry / @central-icons-solid/round-outlined-radius-1-stroke-1 / 1.2.2

@central-icons-solid/round-outlined-radius-1-stroke-1@1.2.2

A collection of round outlined Solid icons with 1px radius and 1px stroke width, designed for use in Solid applications.

AI Security Review

scanned 6d ago · by lpm-firewall-ai

No confirmed attack was identified. The install hook authenticates a package-specific license against a fixed vendor endpoint.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm preinstall runs license-check.js; importing the package exposes SVG icons.

Impact

Installation performs license validation; inspected source shows no credential theft, command execution, persistence, or consumer-file mutation.

Mechanism

The hook reads CENTRAL_LICENSE_KEY and sends it as bearer authentication with the package identity and version, then checks the license response.

AI rationale

The inspected install hook performs ordinary authentication to the license credential's intended service, while runtime code provides SVG icons. The scanner fingerprint does not establish maliciousness, and source inspection revealed no concrete attack behavior.

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json runs license-check.js during preinstall and declares only a Solid peer dependency, with no runtime self-dependency.

@central-icons-solid/round-outlined-radius-1-stroke-1@1.2.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code