@central-icons-svelte/round-outlined-radius-0-stroke-1@1.1.319
A collection of round outlined Svelte icons with 0px radius and 1px stroke width, designed for use in Svelte applications.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThis is a transparent, narrow license-validation implementation rather than confirmed malware, but it automatically transmits an environment credential during installation. The incomplete static coverage and install-time credential transfer warrant a warning rather than a clean result.
Decision evidence
public snapshot- The automatic preinstall hook runs license-check.js.
- The hook reads CENTRAL_LICENSE_KEY and sends it as a bearer token to a remote host during installation.
- The request is limited to one named license-key variable and one license-check endpoint.
- No source writes files, invokes shell commands, loads dynamic code, or persists changes.
- The flagged Icon3d component is static Svelte/SVG markup.
Source & flagged code
5 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgThe automatic preinstall hook runs license-check.js.
package.jsonView on unpkg · L14A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Findings
Affected versions and remediation
This report applies to @central-icons-svelte/round-outlined-radius-0-stroke-1@1.1.319.
See all versions of @central-icons-svelte/round-outlined-radius-0-stroke-1 for other recorded verdicts.
- Review the evidence and your use of @central-icons-svelte/round-outlined-radius-0-stroke-1@1.1.319 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.