registry / @central-icons-svelte/square-outlined-radius-0-stroke-1 / 1.1.299

@central-icons-svelte/square-outlined-radius-0-stroke-1@1.1.299

A collection of square outlined Svelte icons with 0px radius and 1px stroke width, designed for use in Svelte applications.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No confirmed malicious attack surface. The install hook performs a package-aligned remote license validation using a dedicated environment variable.

Static reason

One or more suspicious static signals were detected.

Trigger

npm preinstall

Impact

The configured CENTRAL_LICENSE_KEY is disclosed to the Central Icons license endpoint.

Mechanism

POST license validation

AI rationale

The lifecycle network call is a scoped, package-aligned license check rather than credential harvesting or arbitrary execution. The distributed runtime is an Svelte icon library with no additional malicious primitives found.

Evidence

package.jsonlicense-check.jsindex.jsCentralIconBase.svelte

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 92.0% confidence as Benign with medium false-positive risk.

Evidence for AI clean decision

package.json runs license-check.js at preinstall.
license-check.js posts CENTRAL_LICENSE_KEY as Bearer auth during install.

@central-icons-svelte/square-outlined-radius-0-stroke-1@1.1.299

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code