← Home

@central-icons-react-native/square-filled-radius-0-stroke-2

npm Homepage

A collection of square filled React icons with 0px radius and 2px stroke width, designed for use in React Native / Expo applications.

32
Versions
SEE LICENSE IN LICENSE.md
License
Yes
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

tamino-martinius

Keywords

reactreact-nativeexpoiconssvguidesign-systemsharproundfilledoutlinedstrokeradiuscentral-iconsicon-libraryicon-pack

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:IconReduceMotion/index.mjs AI (source-diff): Same pattern as .js counterpart; standard ESM minified icon bundle. ai
source-diff obfuscated-file:IconReduceMotion/index.js AI (source-diff): Minified icon component bundle; content is plain SVG path data and React calls, not obfuscation. ai
source-diff obfuscated-file:IconReact/index.mjs AI (source-diff): Minified ESM icon component bundle; same benign pattern as CJS counterpart. ai
source-diff obfuscated-file:IconSendLater/index.js AI (source-diff): Minified tsup bundle output for SVG icon component; not obfuscated malware. ai
source-diff obfuscated-file:IconFullMoon/index.js AI (source-diff): Minified tsup bundle output for SVG icon component; not obfuscated malware. ai
source-diff obfuscated-file:IconReact/index.js AI (source-diff): Minified tsup bundle output for SVG icon component; not obfuscated malware. ai
source-diff obfuscated-file:IconSvelte/index.js AI (source-diff): Minified tsup bundle output for SVG icon component; not obfuscated malware. ai
source-diff obfuscated-file:IconFullMoon/index.mjs AI (source-diff): Minified tsup bundle output for SVG icon component; not obfuscated malware. ai
source-diff obfuscated-file:IconMoon1/index.mjs AI (source-diff): ESM variant of same minified icon component; benign SVG path data, consistent with icon library build output. ai
source-diff obfuscated-file:IconMoon1/index.js AI (source-diff): Minified icon component with SVG path data; no malicious patterns, consistent with icon library build output. ai
source-diff large-new-source-files AI (source-diff): Icon pack regularly adds new icon files across versions; pattern is stable and expected for this package. ai
install-scripts install-script:preinstall AI (install-scripts): Runs license-check.js — standard commercial license enforcement for this icon library, not arbitrary code execution. ai

Versions (showing 32 of 32)

Version Deps Published
1.1.247 1 / 5
1.1.246 1 / 5
1.1.241 1 / 5
1.1.240 1 / 5
1.1.239 1 / 5
1.1.238 1 / 5
1.1.237 1 / 5
1.1.236 1 / 5
1.1.235 1 / 5
1.1.234 1 / 5
1.1.233 1 / 5
1.1.232 1 / 5
1.1.229 1 / 5
1.1.226 1 / 5
1.1.225 1 / 5
1.1.224 1 / 5
1.1.223 1 / 5
1.1.222 1 / 5
1.1.221 1 / 5
1.1.220 1 / 5
1.1.219 1 / 5
1.1.218 1 / 5
1.1.217 1 / 5
1.1.216 1 / 5
1.1.197 1 / 5
1.1.195 1 / 5
1.1.190 1 / 5
1.1.186 1 / 5
1.1.178 1 / 5
1.1.177 1 / 5
1.1.176 1 / 5
1.1.175 1 / 5

v1.1.247

3 findings
HIGH New obfuscated file: IconReduceMotion/index.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: IconReduceMotion/index.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.246

3 findings
HIGH New obfuscated file: IconReduceMotion/index.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: IconReduceMotion/index.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.241

3 findings
HIGH New obfuscated file: IconReduceMotion/index.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: IconReduceMotion/index.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.240

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.239

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.238

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.237

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.236

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.235

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.234

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.233

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.232

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.229

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.226

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.225

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.224

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.223

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.222

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.221

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.220

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.219

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.218

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.217

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.197

6 findings
HIGH New obfuscated file: IconFullMoon/index.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: IconReact/index.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: IconSendLater/index.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: IconSvelte/index.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: IconFullMoon/index.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.195

7 findings
HIGH New obfuscated file: IconFullMoon/index.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: IconReact/index.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: IconSendLater/index.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: IconSvelte/index.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: IconFullMoon/index.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: IconReact/index.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.190

3 findings
HIGH New obfuscated file: IconMoon1/index.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: IconMoon1/index.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.186

3 findings
HIGH New obfuscated file: IconMoon1/index.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: IconMoon1/index.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.178

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.177

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.176

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.175

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.