@central-icons-solid/square-outlined-radius-0-stroke-1@1.1.320
A collection of square outlined Solid icons with 0px radius and 1px stroke width, designed for use in Solid applications.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package has a concrete install-time credential-exposure surface, although the disclosed value and endpoint are named as a license check and the implementation is transparent. Static source alone does not prove broader malicious behavior.
Decision evidence
public snapshot- An automatic preinstall hook runs license-check.js during installation.
- The hook reads CENTRAL_LICENSE_KEY and sends it as a Bearer credential to centralicons.com.
- The code is unobfuscated and only handles the named license key.
- No source evidence shows local file mutation, shell execution, payload loading, or other data collection.
Source & flagged code
5 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgAn automatic preinstall hook runs license-check.js during installation.
package.jsonView on unpkg · L13Findings
Affected versions and remediation
This report applies to @central-icons-solid/square-outlined-radius-0-stroke-1@1.1.320.
See all versions of @central-icons-solid/square-outlined-radius-0-stroke-1 for other recorded verdicts.
- Review the evidence and your use of @central-icons-solid/square-outlined-radius-0-stroke-1@1.1.320 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.