registry / @central-icons-svelte/round-outlined-radius-2-stroke-2 / 1.1.309

@central-icons-svelte/round-outlined-radius-2-stroke-2@1.1.309

A collection of round outlined Svelte icons with 2px radius and 2px stroke width, designed for use in Svelte applications.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Install-time code performs a vendor-aligned license validation. No source evidence establishes payload execution, persistence, destructive behavior, or broader data harvesting.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install invokes the preinstall script.

Impact

The configured license key is disclosed to centralicons.com for validation.

Mechanism

POST license-key validation to the package vendor

AI rationale

The preinstall credential-bearing network request is a package-aligned commercial license check, not a demonstrated malicious chain. The remaining runtime source is Svelte icon exports and SVG components.

Evidence

package.jsonlicense-check.jsindex.jsCentralIconBase.svelte

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

Install runs license-check.js.
The check reads CENTRAL_LICENSE_KEY and posts it as Bearer auth.

@central-icons-svelte/round-outlined-radius-2-stroke-2@1.1.309

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code