@central-icons-svelte/round-outlined-radius-0-stroke-1@1.1.316 | LPM Firewall

Loading npm security reports…

@central-icons-svelte/round-outlined-radius-0-stroke-1@1.1.316 | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.preinstall = node ./license-check.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

14"scripts": { "preinstall": "node ./license-check.js", "build": "node ./build.mjs", "prepublishOnly": "npm run build", "lint": "node ./build.mjs" }

Low

Ai Review Evidence

The automatic preinstall script reads CENTRAL_LICENSE_KEY and sends it as a bearer token to centralicons.com.

package.jsonView on unpkg · L14

Icon3d/Icon3d.svelteView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 397

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

Icon3d/Icon3d.svelteView on unpkg

1<script> import CentralIconBase from "../CentralIconBase.svelte"; </script> <CentralIconBase {...$$props} ariaLabel="3d, shaders" maskId="round-outlined-radius-0-stroke-1-Icon3d"> <circle cx="12" cy="12" r="1.5" fill="currentColor"/><circle cx="12" cy="16" r="1.5" fill="currentColor"/><circle cx="8" cy="8" r="1" fill="currentColor"/><circle cx="4" cy="12" r="1" fill="currentColor"/><circle cx="20" cy="12" r="1" fill="currentColor"/><circle cx="12" cy="4" r="1" fill="currentColor"/><circle cx="12" cy="20" r="1" fill="currentColor"/><circle cx="8" cy="4" r="0.75" fill="currentColor"/><circle

Low

Ai Review Evidence

The automatic preinstall script reads CENTRAL_LICENSE_KEY and sends it as a bearer token to centralicons.com.

Icon3d/Icon3d.svelteView on unpkg · L1

license-check.jsView file

1const licenseKey = process.env.CENTRAL_LICENSE_KEY; if (!licenseKey) { throw new Error( "Central Icons license key is not set. Please set CENTRAL_LICENSE_KEY in your environment", ); } const licenseCheck = async () => { const controller = new AbortController(); const timeoutId = setTimeout(() => controller.abort(), 5000); try { const response = await fetch("https://centralicons.com/license/check", { method: "POST", headers: { Authorization: `Bearer ${licenseKey}`, },

Low

Ai Review Evidence

The automatic preinstall script reads CENTRAL_LICENSE_KEY and sends it as a bearer token to centralicons.com.

license-check.jsView on unpkg · L1

README.mdView file

2405## AI Assistant Support This package ships a skill for AI coding assistants (Claude Code, Cursor, GitHub Copilot, and 40+ others) that teaches the assistant how to find icons by name, alias, or category and insert them with correct imports. After installing the package, add the skill with the [Vercel `skills` CLI](https://github.com/vercel-labs/skills): ```bash npx skills add ./node_modules/@central-icons-svelte/round-outlined-radius-0-stroke-1 ``` The CLI auto-detects which AI assistant you use and installs the skill at the right path (for Claude Code, this is `.claude/skills/central

Low

Ai Review Evidence

The package includes an explicit user-run command that can install an AI-assistant skill through a third-party CLI.

README.mdView on unpkg · L2405

Source & flagged code

6 flagged

package.jsonView file

Lines 1-24json

1{

2 "name": "@central-icons-svelte/round-outlined-radius-0-stroke-1",

3 "version": "1.1.316",

4 "license": "SEE LICENSE IN LICENSE.md",

5 "homepage": "https://iconists.co/central",

6 "sideEffects": false,

7 "svelte": "./index.js",

8 "types": "./index.d.ts",

9 "exports": {

10 ".": { "types": "./index.d.ts", "svelte": "./index.js", "default": "./index.js" },

11 "./*": { "types": "./*/index.d.ts", "svelte": "./*/*.svelte", "default": "./*/*.svelte" }

12 },

13 "files": ["**/*.svelte", "**/*.js", "**/*.d.ts", "**/*.md", "icons-index.json"],

14 "scripts": {

15 "preinstall": "node ./license-check.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L15

16 "build": "node ./build.mjs",

17 "prepublishOnly": "npm run build",

18 "lint": "node ./build.mjs"

19 },

Low

Ai Review Evidence

The automatic preinstall script reads CENTRAL_LICENSE_KEY and sends it as a bearer token to centralicons.com.

package.jsonView on unpkg · L14

20 "peerDependencies": { "svelte": ">=4" },

21 "keywords": ["svelte", "icons", "svg", "central-icons", "icon-pack"],

22 "author": "Iconists"

23}

24

Icon3d/Icon3d.svelteView file

Lines 1-7text

1<script>

2 import CentralIconBase from "../CentralIconBase.svelte";

3</script>

4<CentralIconBase {...$$props} ariaLabel="3d, shaders" maskId="round-outlined-radius-0-stroke-1-Icon3d">

5 <circle cx="12" cy="12" r="1.5" fill="currentColor"/><circle cx="12" cy="16" r="1.5" fill="currentColor"/><circle cx="8" cy="8" r="1" fill="currentColor"/><circle cx="4" cy="12" r="1" fill="currentColor"/><circle cx="20" cy="12" r="1" fill="currentColor"/><circle cx="12" cy="4" r="1" fill="currentColor"/><circle cx="12" cy="20" r="1" fill="currentColor"/><circle cx="8" cy="4" r="0.75" fill="currentColor"/><circle cx="16" cy="4" r="0.75" fill="currentColor"/><circle cx="4" cy="4" r="0.5" fill="currentColor"/><circle cx="20" cy="4" r="0.5" fill="currentColor"/><circle cx="4" cy="8" r="0.75" fi ...

Low

Ai Review Evidence

The automatic preinstall script reads CENTRAL_LICENSE_KEY and sends it as a bearer token to centralicons.com.

Icon3d/Icon3d.svelteView on unpkg · L1

6</CentralIconBase>

7

license-check.jsView file

Lines 1-21javascript

1const licenseKey = process.env.CENTRAL_LICENSE_KEY;

2

3if (!licenseKey) {

4 throw new Error(

5 "Central Icons license key is not set. Please set CENTRAL_LICENSE_KEY in your environment"

README.mdView file

Lines 2385-2425markdown

2385- IconSnowFlakes

2386- IconWind

2387- IconCloudWeather

2388- IconCloudy

2389- IconCloudySun

2390- IconRainy

2391- IconRainyLight

2392- IconCloudSnow