npmpackage.info

Gathering detailed insights and metrics for nanoid

Other packages similar to nanoid

@types/nanoid

3.0.0

Stub TypeScript definitions entry for nanoid, which provides its own types definitions

nanoid-dictionary

4.3.0

Predefined character sets to use with nanoid

@types/nanoid-dictionary

4.2.3

TypeScript definitions for nanoid-dictionary

nanoid-generate

1.1.0

Nanoid generate with custom dictionaries

Gathering detailed insights and metrics for nanoid

nanoid

A tiny (124 bytes), secure, URL-friendly, unique string ID generator for JavaScript

5.0.9

24,734

MIT

JavaScript

463.00 B

5,322,535,747

4.6

Installations

npm install nanoid

Developer Guide

BETA

Typescript

✅ Yes

Module System

ESM, UMD

Min. Node Version

^18 || >=20

Node Version

22.11.0

NPM Version

10.9.0 Score

99.6

Supply Chain

77.9

Quality

87.8

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

0

Total

234

Closed

41

Merged

193

Issues

Open

7

Total

242

Closed

235

Releases

5.0.9

Published on 26 Nov 2024

5.0.8

Published on 28 Oct 2024

5.0.7

Published on 07 Apr 2024

5.0.6

Published on 20 Feb 2024

3.0 Migration Guide

3.0.0

Published on 26 Mar 2020

View all 5 releases

Contributors

134

View all 134 contributors

Developer

Statistics

24,734 Stars

1,097 Commits

795 Forks

157 Watching

3 Branches

134 Contributors

Updated on 05 Dec 2024

Bundle Size

799.00 B

Minified

463.00 B

Minified + Gzipped

Bundlephobia

Languages

JavaScript (96.32%)

HTML (3.68%)

Total Downloads

Cumulative downloads

Total Downloads

5,322,535,747

Last day

8.3%

8,729,605

Compared to previous day

Last week

-7.5%

42,269,052

Compared to previous week

Last month

11.1%

189,941,802

Compared to previous month

Last year

25.7%

1,920,580,896

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

No dependencies detected.

Versions

Nano ID

English | Русский | 简体中文 | Bahasa Indonesia

A tiny, secure, URL-friendly, unique string ID generator for JavaScript.

“An amazing level of senseless perfectionism, which is simply impossible not to respect.”

Small. 118 bytes (minified and brotlied). No dependencies. Size Limit controls the size.
Safe. It uses hardware random generator. Can be used in clusters.
Short IDs. It uses a larger alphabet than UUID (A-Za-z0-9_-). So ID size was reduced from 36 to 21 symbols.
Portable. Nano ID was ported to over 20 programming languages.

1import { nanoid } from 'nanoid'
2model.id = nanoid() //=> "V1StGXR8_Z5jdHi6B-myT"

Made at Evil Martians, product consulting for developer tools.

Docs

Read full docs here.

Stable Version

5.0.9

MODERATE

5.5/10

Summary

Exposure of Sensitive Information to an Unauthorized Actor in nanoid

Affected Versions

>= 3.0.0, < 3.1.31

Patched Versions

3.1.31

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Maintained

Determines if the project is "actively maintained".

10

License

Determines if the project has defined a license.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/ai/nanoid/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/ai/nanoid/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/ai/nanoid/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/ai/nanoid/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/ai/nanoid/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/ai/nanoid/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/ai/nanoid/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/ai/nanoid/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/ai/nanoid/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/ai/nanoid/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/ai/nanoid/test.yml/main?enable=pin
Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 4 third-party GitHubAction dependencies pinned

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

4.6

/10

Last Scanned on 2024-12-02

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to nanoid

Other packages similar to nanoid

nanoid

Installations

Developer Guide

✅ Yes

ESM, UMD

^18 || >=20

22.11.0

10.9.0

Score

Pull Requests

:host{display:inline-block;direction:ltr;white-space:nowrap;line-height:var(--number-flow-char-height, 1em) !important}span{display:inline-block}:host([data-will-change]) span{will-change:transform}.number,.digit{padding:calc(var(--number-flow-mask-height, 0.25em) / 2) 0}.symbol{white-space:pre}00

Issues

:host{display:inline-block;direction:ltr;white-space:nowrap;line-height:var(--number-flow-char-height, 1em) !important}span{display:inline-block}:host([data-will-change]) span{will-change:transform}.number,.digit{padding:calc(var(--number-flow-mask-height, 0.25em) / 2) 0}.symbol{white-space:pre}77

Releases

Contributors

Developer

Statistics

Bundle Size

799.00 B

463.00 B

Languages

Total Downloads

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Nano ID

Docs

Stable Version

5.0.9

MODERATE

10

10

10

10

10

2

0

0

0

0

0

0

0

4.6

/10

0

7