Loading npm security reports…
A collection of square filled Solid icons with 0px radius and 1px stroke width, designed for use in Solid applications.
No attack was identified. The install hook performs license validation by sending the configured license key to the package's license endpoint.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe install hook runs license-check.js, which requires an explicitly supplied CENTRAL_LICENSE_KEY.
package.jsonView on unpkg · L13Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkgThe script sends that key as a bearer token to centralicons.com/license/check together with this package identity and version.
license-check.jsView on unpkg · L1The endpoint is package-aligned license validation; no unrelated recipient or other confirmed attack behavior was identified.
license-check.jsView on unpkg · L14This report applies to @central-icons-solid/square-filled-radius-0-stroke-1@1.2.4.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L14The install hook runs license-check.js, which requires an explicitly supplied CENTRAL_LICENSE_KEY.
package.jsonView on unpkg · L13The script sends that key as a bearer token to centralicons.com/license/check together with this package identity and version.
license-check.jsView on unpkg · L1The endpoint is package-aligned license validation; no unrelated recipient or other confirmed attack behavior was identified.
license-check.jsView on unpkg · L14Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkg