registry / @central-icons-svelte/round-outlined-radius-2-stroke-1.5 / 1.1.291

@central-icons-svelte/round-outlined-radius-2-stroke-1.5@1.1.291

A collection of round outlined Svelte icons with 2px radius and 1.5px stroke width, designed for use in Svelte applications.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

No confirmed malicious attack surface. Install-time code performs a package-aligned license validation network request using a package-specific environment variable.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install runs preinstall

Impact

License validation may disclose CENTRAL_LICENSE_KEY to the vendor endpoint; no broader credential/file access or mutation was found.

Mechanism

license key validation POST

AI rationale

The suspicious primitives are explained by a commercial icon package license check and an explicit-user-installed assistant skill; source inspection found no exfiltration beyond the package-specific license key, no filesystem mutation, and no remote code execution. Mark clean because the remaining behavior is package-aligned and disclosed rather than a concrete malicious chain.

Evidence

package.jsonlicense-check.jsREADME.mdskills/central-icons-svelte/SKILL.mdindex.jsCentralIconBase.svelte

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence with false-positive risk.

@central-icons-svelte/round-outlined-radius-2-stroke-1.5@1.1.291

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code