registry / @central-icons-svelte/square-filled-radius-0-stroke-1.5 / 1.1.291

@central-icons-svelte/square-filled-radius-0-stroke-1.5@1.1.291

A collection of square filled Svelte icons with 0px radius and 1.5px stroke width, designed for use in Svelte applications.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The only active install-time behavior is license validation. It sends the CENTRAL_LICENSE_KEY to the vendor license-check endpoint and does not write files or execute remote code.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install runs the preinstall lifecycle script

Impact

License key disclosure to the package vendor only; no confirmed malicious impact

Mechanism

package-aligned license check over HTTPS

AI rationale

Static inspection shows a private icon package with a preinstall license check and static Svelte icon exports. The network/env-var signals are explained by documented license validation and no concrete attack chain or unconsented control-surface mutation remains.

Evidence

package.jsonlicense-check.jsREADME.mdindex.jsCentralIconBase.svelteskills/central-icons-svelte/SKILL.md

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with medium false-positive risk.

@central-icons-svelte/square-filled-radius-0-stroke-1.5@1.1.291

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code