@central-icons-svelte/round-outlined-radius-0-stroke-1@1.1.318
A collection of round outlined Svelte icons with 0px radius and 1px stroke width, designed for use in Svelte applications.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe source establishes automatic preinstall-time transmission of an environment credential. Its narrow license-check purpose reduces the likelihood of malware, but the install-time credential disclosure remains a concrete risk.
Decision evidence
public snapshot- The package automatically runs license-check.js during preinstall.
- The preinstall script reads CENTRAL_LICENSE_KEY and sends it as a Bearer authorization value to a remote host.
- The network request is limited to a named license-key environment variable and a package-version license check.
- The inspected icon component is static Svelte SVG markup; no child-process, filesystem-write, dynamic-code, or payload-loading behavior was found.
Source & flagged code
5 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgThe package automatically runs license-check.js during preinstall.
package.jsonView on unpkg · L14A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Findings
Affected versions and remediation
This report applies to @central-icons-svelte/round-outlined-radius-0-stroke-1@1.1.318.
See all versions of @central-icons-svelte/round-outlined-radius-0-stroke-1 for other recorded verdicts.
- Review the evidence and your use of @central-icons-svelte/round-outlined-radius-0-stroke-1@1.1.318 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.