registry / @central-icons-svelte/round-filled-radius-0-stroke-1 / 1.1.312

@central-icons-svelte/round-filled-radius-0-stroke-1@1.1.312

A collection of round filled Svelte icons with 0px radius and 1px stroke width, designed for use in Svelte applications.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Install invokes a vendor license-validation request. No confirmed malicious attack surface is established.

Static reason

One or more suspicious static signals were detected.

Trigger

npm preinstall

Impact

Validates commercial-package licensing; no source evidence of host modification or unrelated data exfiltration.

Mechanism

POSTs configured license key to vendor license endpoint

AI rationale

The preinstall hook is a package-aligned license check using an explicitly named license-key environment variable and fixed package metadata. Source inspection found no concrete malicious behavior.

Evidence

package.jsonlicense-check.jsindex.js

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

Preinstall runs a license checker that reads CENTRAL_LICENSE_KEY.
The checker POSTs the license key as Bearer authentication to centralicons.com.

@central-icons-svelte/round-filled-radius-0-stroke-1@1.1.312

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code