@central-icons-svelte/round-outlined-radius-0-stroke-1@1.1.320
A collection of round outlined Svelte icons with 0px radius and 1px stroke width, designed for use in Svelte applications.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package has a concrete automatic install-time credential transfer, though the endpoint and payload are narrowly tied to its stated license check and no broader malicious chain was found.
Decision evidence
public snapshot- Installation automatically runs license-check.js.
- The install hook reads CENTRAL_LICENSE_KEY and sends it as a Bearer token to centralicons.com.
- The flagged Icon3d component is static SVG markup and contains no executable logic.
- No file writes, shell execution, dynamic code loading, or persistence were found in the inspected executable source.
- The outbound request is narrowly scoped to the package's named license-check endpoint and sends package/version metadata.
Source & flagged code
6 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Findings
Affected versions and remediation
This report applies to @central-icons-svelte/round-outlined-radius-0-stroke-1@1.1.320.
See all versions of @central-icons-svelte/round-outlined-radius-0-stroke-1 for other recorded verdicts.
- Review the evidence and your use of @central-icons-svelte/round-outlined-radius-0-stroke-1@1.1.320 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.