registry / @central-icons-svelte/square-filled-radius-0-stroke-1.5 / 1.1.310

@central-icons-svelte/square-filled-radius-0-stroke-1.5@1.1.310

A collection of square filled Svelte icons with 0px radius and 1.5px stroke width, designed for use in Svelte applications.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Installation invokes a package-owned license verifier that transmits the configured license key to centralicons.com. No code writes files, alters agent configuration, executes a shell, or loads remote code.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation runs preinstall.

Impact

The configured CENTRAL_LICENSE_KEY is disclosed to the package's stated license-check service.

Mechanism

license-key validation POST

AI rationale

The preinstall network request is a disclosed, package-aligned license validation rather than a malicious chain. Static source inspection found no harvesting beyond the named license key, exfiltration to an unrelated host, persistence, destructive action, or automatic AI-agent configuration mutation.

Evidence

package.jsonlicense-check.jsREADME.mdindex.jsskills/central-icons-svelte/SKILL.md

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

@central-icons-svelte/square-filled-radius-0-stroke-1.5@1.1.310

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code