Loading npm security reports…
A collection of round filled Svelte icons with 0px radius and 1px stroke width, designed for use in Svelte applications.
No attack was identified. The install hook checks the package license by sending the explicitly configured license key to the package vendor's license endpoint.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe install hook runs a license check using the explicitly named CENTRAL_LICENSE_KEY environment variable.
package.jsonView on unpkg · L14A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Icon3d/Icon3d.svelteView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkgThe check sends that key as a bearer token to centralicons.com and identifies this package and version.
license-check.jsView on unpkg · L1This report applies to @central-icons-svelte/round-filled-radius-0-stroke-1@1.2.6.
See version security history for other recorded verdicts.
Evidence last updated: .
The check sends that key as a bearer token to centralicons.com and identifies this package and version.
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L15The install hook runs a license check using the explicitly named CENTRAL_LICENSE_KEY environment variable.
package.jsonView on unpkg · L14A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Icon3d/Icon3d.svelteView on unpkgThe check sends that key as a bearer token to centralicons.com and identifies this package and version.
license-check.jsView on unpkg · L1The check sends that key as a bearer token to centralicons.com and identifies this package and version.
license-check.jsView on unpkg · L14Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkg