@central-icons-svelte/round-filled-radius-2-stroke-2@1.1.319
A collection of round filled Svelte icons with 2px radius and 2px stroke width, designed for use in Svelte applications.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has a real install-time credential-transmission capability, but the inspected source does not establish broader theft, persistence, destructive behavior, or remote code execution. Treat the automatic networked license check as unresolved risk.
Decision evidence
public snapshot- The preinstall hook automatically runs a networked license-check script.
- That script reads CENTRAL_LICENSE_KEY and sends it as a bearer token to centralicons.com during installation.
- The inspected icon component is static Svelte SVG markup.
- The license script contains no file writes, shell execution, dynamic code loading, or additional endpoints.
Source & flagged code
5 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgThe preinstall hook automatically runs a networked license-check script.
package.jsonView on unpkg · L13Findings
Affected versions and remediation
This report applies to @central-icons-svelte/round-filled-radius-2-stroke-2@1.1.319.
See all versions of @central-icons-svelte/round-filled-radius-2-stroke-2 for other recorded verdicts.
- Review the evidence and your use of @central-icons-svelte/round-filled-radius-2-stroke-2@1.1.319 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.