registry / @central-icons-solid/square-outlined-radius-0-stroke-1.5 / 1.1.291

@central-icons-solid/square-outlined-radius-0-stroke-1.5@1.1.291

A collection of square outlined Solid icons with 0px radius and 1.5px stroke width, designed for use in Solid applications.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

Install-time license validation sends CENTRAL_LICENSE_KEY to the package vendor endpoint. This is package-aligned licensing behavior, not confirmed malicious activity.

Static reason

One or more suspicious static signals were detected.

Trigger

npm preinstall lifecycle

Impact

License key is disclosed to the vendor license-check service; no broader credential/file harvesting found.

Mechanism

license key validation HTTP POST

AI rationale

Source inspection shows a private icon package with a preinstall license check and an inert optional assistant skill, but no concrete exfiltration beyond the documented vendor license key validation or unauthorized agent control-surface mutation. The scanner network/env findings are explained by package-aligned licensing behavior.

Evidence

package.jsonlicense-check.jsREADME.mdindex.jsxsrc/CentralIconBase.tsxskills/central-icons-solid/SKILL.md

Network endpoints2

centralicons.com/license/checkiconists.co/central

Decision evidence

public snapshot

with false-positive risk.

@central-icons-solid/square-outlined-radius-0-stroke-1.5@1.1.291

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code