registry / @central-icons-svelte/round-filled-radius-3-stroke-1.5 / 1.1.314

@central-icons-svelte/round-filled-radius-3-stroke-1.5@1.1.314

A collection of round filled Svelte icons with 3px radius and 1.5px stroke width, designed for use in Svelte applications.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No confirmed malicious attack surface. npm preinstall performs package-aligned vendor license validation and does not modify files or execute downloaded code.

Static reason

One or more suspicious static signals were detected.

Trigger

npm preinstall

Impact

The supplied license key is disclosed to the vendor for validation.

Mechanism

POSTs CENTRAL_LICENSE_KEY to the declared vendor license endpoint

AI rationale

The install-time network request is an explicit, package-specific license check using a dedicated environment variable. Source inspection found no concrete exfiltration beyond that declared check or other malicious behavior.

Evidence

package.jsonlicense-check.jsindex.js

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 92.0% confidence as Benign with medium false-positive risk.

Evidence for AI clean decision

Preinstall runs a license-check script that posts the named license key as a Bearer token to the vendor license endpoint.

@central-icons-svelte/round-filled-radius-3-stroke-1.5@1.1.314

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code