Loading npm security reports…
A collection of square filled Solid icons with 0px radius and 1px stroke width, designed for use in Solid applications.
No confirmed attack was identified. The install hook performs ordinary license authentication against a fixed package-aligned service.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgpackage.json runs license-check.js during preinstall and has no runtime self-dependency.
package.jsonView on unpkg · L13Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkglicense-check.js sends the Central Icons license key to the fixed Central Icons license-check endpoint with package and version metadata.
license-check.jsView on unpkg · L14The hook reads only CENTRAL_LICENSE_KEY; inspected code contains no file harvesting, shell execution, downloaded code execution, or filesystem mutation.
license-check.jsView on unpkg · L1This report applies to @central-icons-solid/square-filled-radius-0-stroke-1@1.2.2.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L14package.json runs license-check.js during preinstall and has no runtime self-dependency.
package.jsonView on unpkg · L13The hook reads only CENTRAL_LICENSE_KEY; inspected code contains no file harvesting, shell execution, downloaded code execution, or filesystem mutation.
license-check.jsView on unpkg · L1license-check.js sends the Central Icons license key to the fixed Central Icons license-check endpoint with package and version metadata.
license-check.jsView on unpkg · L14Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkg