Loading npm security reports…
A collection of round outlined Solid icons with 2px radius and 1.5px stroke width, designed for use in Solid applications.
Installation automatically executes code that transmits an environment credential. The credential is sent to a remote endpoint before the package is used.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe preinstall lifecycle hook automatically runs license-check.js during npm installation.
package.jsonView on unpkg · L13Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkgThe hook reads CENTRAL_LICENSE_KEY and POSTs it as a Bearer credential to an external endpoint.
license-check.jsView on unpkg · L1The hook reads CENTRAL_LICENSE_KEY and POSTs it as a Bearer credential to an external endpoint.
license-check.jsView on unpkg · L14This report applies to @central-icons-solid/round-outlined-radius-2-stroke-1.5@1.1.316.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L14The preinstall lifecycle hook automatically runs license-check.js during npm installation.
package.jsonView on unpkg · L13The hook reads CENTRAL_LICENSE_KEY and POSTs it as a Bearer credential to an external endpoint.
license-check.jsView on unpkg · L1The hook reads CENTRAL_LICENSE_KEY and POSTs it as a Bearer credential to an external endpoint.
license-check.jsView on unpkg · L14Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkg