registry / @central-icons-svelte/square-outlined-radius-0-stroke-1 / 1.1.291

@central-icons-svelte/square-outlined-radius-0-stroke-1@1.1.291

A collection of square outlined Svelte icons with 0px radius and 1px stroke width, designed for use in Svelte applications.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The only confirmed install-time behavior is a license validation request using CENTRAL_LICENSE_KEY. This is not a confirmed malicious attack surface because it is package-aligned and does not collect broader environment, files, or execute remote code.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install runs package preinstall

Impact

Sends the CENTRAL_LICENSE_KEY value to the vendor license endpoint; invalid or missing key can affect installation.

Mechanism

license-key validation HTTP POST

AI rationale

Source inspection shows an icon library with an install-time vendor license check, plus static Svelte component exports and an inert package-owned skill guide. There is no evidence of credential harvesting beyond the declared license key, exfiltration to unrelated hosts, remote payload execution, persistence, destructive behavior, or unconsented AI-agent control-surface mutation.

Evidence

package.jsonlicense-check.jsREADME.mdindex.jsCentralIconBase.sveltesrc/CentralIconBase.svelteskills/central-icons-svelte/SKILL.md

Network endpoints3

centralicons.com/license/checkiconists.co/centraliconists.co/license

@central-icons-svelte/square-outlined-radius-0-stroke-1@1.1.291

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code