Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
napi-nanoid
Advanced tools
The NAPI nanoid written in Rust
一款基于 Rust 实现的 NAPI nanoid
$ npm i napi-nanoid
const { nanoid } = require('napi-nanoid')
nanoid() // => AeogKAGjUMX6mqB4sMzWe
nanoid compare
js-nanoid:
3 318 612 ops/s, ±1.10%
napi-nanoid:
5 141 154 ops/s, ±0.84%
js-nanoid (non-secure):
2 005 501 ops/s, ±0.15%
napi-nanoid (non-secure):
5 359 638 ops/s, ±0.13%
performance of all
shortid 23,900 ops/sec
cuid 102,473 ops/sec
secure-random-string 194,803 ops/sec
uuid 839,287 ops/sec
js-nanoid (non-secure) 1,944,889 ops/sec
js-nanoid (secure) 3,323,263 ops/sec
napi-nanoid (secure) 4,862,067 ops/sec
napi-nanoid (non-secure) 5,007,932 ops/sec
crypto.randomUUID 10,658,212 ops/sec
hyperid 14,534,342 ops/sec
Benchmark configuration: Linux x64 gnu, Intel(R) Xeon(R) Platinum 8370C CPU @ 2.80GHz, Node.js 16.20.0
node14 | node16 | node18 | |
---|---|---|---|
Windows x64 | ✓ | ✓ | ✓ |
Windows x32 | ✓ | ✓ | ✓ |
Windows arm64 | ✓ | ✓ | ✓ |
macOS x64 | ✓ | ✓ | ✓ |
macOS arm64 | ✓ | ✓ | ✓ |
Linux x64 gnu | ✓ | ✓ | ✓ |
Linux x64 musl | ✓ | ✓ | ✓ |
Linux arm gnu | ✓ | ✓ | ✓ |
Linux arm64 gnu | ✓ | ✓ | ✓ |
Linux arm64 musl | ✓ | ✓ | ✓ |
Android arm64 | ✓ | ✓ | ✓ |
Android armv7 | ✓ | ✓ | ✓ |
FreeBSD x64 | ✓ | ✓ | ✓ |
$ git clone https://github.com/rustq/napi-nanoid
$ cd napi-nanoid
$ yarn
$ yarn build
$ yarn test
$ yarn bench
FAQs
The NAPI nanoid written in Rust
We found that napi-nanoid demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.