
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
egg-liteflake
Advanced tools
Egg plugin to generate unique and increased twitter-snowflake uuid.
egg-liteflake will first assign a unique worker id to each worker by using the IPC messaging, and then create uuid according to the twitter snowflake algorithm.
$ npm install egg-liteflake
config/plugin.js
exports.liteflake = {
enable: true,
package: 'egg-liteflake'
}
config/config.default.js
// |--- timestamp ---|- machine -|- worker -|-- serial --|
// |----- 31 bit ----|---- 6 ----|--- 4 ----|---- 12 ----|
// | | | | |
// 00000000000000000 000001 0000 000000000000
exports.liteflake = {
client: {
machineId: 1,
// `Number` if 6-bit length (the default value),
// we could handle servers from `2 ** 6` different machines.
// And if 0, there will be no machine id in the uuid
machineIdBitLength: 6,
workerIdBitLength: 4,
// Could handle max 4096 requests per millisecond
serialIdBitLength: 12
}
}
Then:
...
async doSomething () {
const {liteflake} = this.app
const uuid = await liteflake.uuid()
console.log(uuid)
// '6465404975054230'
const workerId = await liteflake.index()
console.log(workerId)
// 0
}
...
Generates the unique and time-based id across workers (/ machines)
Returns String | Promise<String> instead of Number due to the bad accuracy of JavaScript.
The bit-length of the return value equals to:
31 + machineIdBitLength + workerIdBitLength + serialIdBitLength
So you could use the three configuration options to handle the length of uuids.
Returns String | Promise<Number> the 0-index unique worker id of the current cluster.
MIT
FAQs
Egg plugin to generate unique and increased twitter-snowflake uuid.
We found that egg-liteflake demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.