@central-icons-svelte/round-filled-radius-2-stroke-2@1.2.24
A collection of round filled Svelte icons with 2px radius and 2px stroke width, designed for use in Svelte applications.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe automatic network request is part of the package’s documented license check: the README tells users to set CENTRAL_LICENSE_KEY before installation, and the hook sends it to the package’s own licensing endpoint. The inspected entry point and icon source are consistent with a Svelte icon library.
Decision evidence
public snapshot- The README instructs users to set CENTRAL_LICENSE_KEY before installing the package.
- The preinstall hook sends that license key to centralicons.com/license/check as a Bearer token with this package’s name and version.
- The published entry point exports Svelte icon components; the inspected icon source contains SVG markup.
- A preinstall hook runs automatically and contacts a network endpoint when a license key is present.
- The hook checks for an invalid license key, but catches errors from the network request and response handling.
Source & flagged code
6 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Icon3d/Icon3d.svelteView on unpkgFindings
Affected versions and remediation
This report applies to @central-icons-svelte/round-filled-radius-2-stroke-2@1.2.24.
See all versions of @central-icons-svelte/round-filled-radius-2-stroke-2 for other recorded verdicts.
- Review the evidence and your use of @central-icons-svelte/round-filled-radius-2-stroke-2@1.2.24 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.