registry / @central-icons-svelte/square-filled-radius-0-stroke-1.5 / 1.1.301

@central-icons-svelte/square-filled-radius-0-stroke-1.5@1.1.301

A collection of square filled Svelte icons with 0px radius and 1.5px stroke width, designed for use in Svelte applications.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Install invokes a vendor license validation request using an explicitly named license-key environment variable. No malicious payload, local mutation, or broader harvesting was established.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install

Impact

The supplied CENTRAL_LICENSE_KEY is disclosed to centralicons.com for validation.

Mechanism

package-aligned license-key validation POST

AI rationale

The preinstall hook sends only the explicit Central license key to a package-aligned licensing endpoint and contains no further attack chain. Static network and environment-variable signals are therefore attributable to license validation.

Evidence

package.jsonlicense-check.jsindex.jsCentralIconBase.svelte

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with medium false-positive risk.

Evidence for AI clean decision

package.json runs license-check.js at preinstall.

@central-icons-svelte/square-filled-radius-0-stroke-1.5@1.1.301

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code