
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
napi-nanoid
Advanced tools
The NAPI nanoid written in Rust
一款基于 Rust 实现的 NAPI nanoid
$ npm i napi-nanoid
const { nanoid } = require('napi-nanoid')
nanoid() // => AeogKAGjUMX6mqB4sMzWe
nanoid compare
js-nanoid:
3 318 612 ops/s, ±1.10%
napi-nanoid:
5 141 154 ops/s, ±0.84%
js-nanoid (non-secure):
2 005 501 ops/s, ±0.15%
napi-nanoid (non-secure):
5 359 638 ops/s, ±0.13%
performance of all
shortid 23,900 ops/sec
cuid 102,473 ops/sec
secure-random-string 194,803 ops/sec
uuid 839,287 ops/sec
js-nanoid (non-secure) 1,944,889 ops/sec
js-nanoid (secure) 3,323,263 ops/sec
napi-nanoid (secure) 4,862,067 ops/sec
napi-nanoid (non-secure) 5,007,932 ops/sec
crypto.randomUUID 10,658,212 ops/sec
hyperid 14,534,342 ops/sec
Benchmark configuration: Linux x64 gnu, Intel(R) Xeon(R) Platinum 8370C CPU @ 2.80GHz, Node.js 16.20.0
node14 | node16 | node18 | |
---|---|---|---|
Windows x64 | ✓ | ✓ | ✓ |
Windows x32 | ✓ | ✓ | ✓ |
Windows arm64 | ✓ | ✓ | ✓ |
macOS x64 | ✓ | ✓ | ✓ |
macOS arm64 | ✓ | ✓ | ✓ |
Linux x64 gnu | ✓ | ✓ | ✓ |
Linux x64 musl | ✓ | ✓ | ✓ |
Linux arm gnu | ✓ | ✓ | ✓ |
Linux arm64 gnu | ✓ | ✓ | ✓ |
Linux arm64 musl | ✓ | ✓ | ✓ |
Android arm64 | ✓ | ✓ | ✓ |
Android armv7 | ✓ | ✓ | ✓ |
FreeBSD x64 | ✓ | ✓ | ✓ |
$ git clone https://github.com/rustq/napi-nanoid
$ cd napi-nanoid
$ yarn
$ yarn build
$ yarn test
$ yarn bench
FAQs
The NAPI nanoid written in Rust
The npm package napi-nanoid receives a total of 116 weekly downloads. As such, napi-nanoid popularity was classified as not popular.
We found that napi-nanoid demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.