@central-icons-solid/square-outlined-radius-0-stroke-1@1.2.1
A collection of square outlined Solid icons with 0px radius and 1px stroke width, designed for use in Solid applications.
AI Security Review
scanned 26d ago · by lpm-firewall-aiThe preinstall script is a package-aligned license check that sends CENTRAL_LICENSE_KEY only to centralicons.com and otherwise has no side effects. Icon modules are Solid SVG components with no install or import-time attack behavior.
Decision evidence
public snapshot- preinstall runs only node ./license-check.js; the package has no runtime dependencies and peers only solid-js.
- If CENTRAL_LICENSE_KEY is unset, license-check.js throws before any network call and stops the install.
- When set, the key is sent only as a Bearer token in a POST to the fixed vendor URL https://centralicons.com/license/check with this package name and version.
- Fetch, HTTP, and JSON failures are logged and swallowed; the script does not read files, spawn processes, or write agent config.
Source & flagged code
6 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgpreinstall runs only node ./license-check.js; the package has no runtime dependencies and peers only solid-js.
package.jsonView on unpkg · L13Findings
Affected versions and remediation
This report applies to @central-icons-solid/square-outlined-radius-0-stroke-1@1.2.1.
See all versions of @central-icons-solid/square-outlined-radius-0-stroke-1 for other recorded verdicts.
- Review the evidence and your use of @central-icons-solid/square-outlined-radius-0-stroke-1@1.2.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.