shortid

Amazingly short non-sequential url-friendly unique id generator.

Supply chain provenance

Status for the latest visible version.

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

Keywords

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	publisher-changed	AI (provenance): Publisher change (dylang → ai) occurred in 2017, over 7 years ago. Publisher 'ai' has a strong track record (2030 approved packages). Legitimate historical maintainer transition; stable for this package.	ai	2026/04/24
provenance	missing-githead	AI (provenance): shortid is a long-established package; missing gitHead in one version is a minor publish-environment change, not a malicious signal, especially with no other material changes in the diff.	ai	2026/04/24
provenance	no-provenance	AI (provenance): shortid is a long-established package; lack of Sigstore attestation is expected for packages not yet migrated to CI/CD publishing.	ai	2026/04/24

Version	Deps	Published
2.2.17	1 / 17	2025-01-23
2.2.16	1 / 0	2020-10-21
2.2.15	1 / 0	2019-09-06
2.2.14	1 / 0	2018-11-04
2.2.13	1 / 16	2018-08-16
2.2.12	1 / 16	2018-07-12
2.2.11	1 / 16	2018-07-09
2.2.10	1 / 16	2018-07-08
2.2.9	1 / 16	2018-07-08
2.2.8	0 / 16	2017-03-05
2.2.7	0 / 16	2017-03-05
2.2.6	0 / 16	2016-04-03
2.2.5	0 / 16	2016-04-03
2.2.4	0 / 16	2015-10-17
2.2.3	1 / 15	2015-10-14
2.2.2	0 / 15	2015-04-05
2.2.1	1 / 14	2015-03-16
2.1.3	0 / 9	2014-11-07
2.1.2	0 / 9	2014-10-26
2.1.1	0 / 9	2014-10-26
2.1.0	0 / 9	2014-10-26
2.0.1	0 / 2	2014-06-20
2.0.0	0 / 2	2013-07-21
1.0.9	0 / 2	2012-08-07
1.0.8	0 / 2	2012-06-06
1.0.7	0 / 2	2012-06-06
1.0.6	0 / 2	2012-01-12
1.0.5	0 / 2	2012-01-03
1.0.3	0 / 2	2011-12-19
1.0.2	0 / 2	2011-12-19
1.0.1	0 / 2	2011-12-19
1.0.0	0 / 2	2011-12-19