nanoid

6.0.2

npm / nanoid / 6.0.2· requested latest

Scan ID

f8d3ce79-2…

Scanned

Oct 12, 2026, 4:04 PM

SAFENo threats detected

Scan summary

nanoid@latest was inspected against npm metadata, its published tarball and OSV advisories, and returned ALLOW.

Recorded evidence

Verdict
ALLOW
Risk score
0/100
Findings
0
Signed by
3 local roles

Package code was never executed. Open the Threats tab for individual findings and the exact lines they matched.

SAFE

nanoid@latest

TypenpmSize—Published—

Risk Score

0/ 100

Summary

Risk score 0/100 under policy d0-policy/1.0.0. No policy violation was detected in the downloaded artifact. No published advisory matches this exact version. Three locally signed scanner roles reached ALLOW at quorum 3/3. The result is anchored and confirmed on Solana Devnet.

Scanner Consensus

  • 0Block
  • 0Review
  • 3Allow
Quorum3/3ResultallowPolicyd0-consensus/1.0.0

All three scanner roles independently returned ALLOW with valid signatures.

  • allowstatic_lifecyclea5c7b61d4cdb…
  • allowdependency_advisory880fb0adaa2c…
  • allowartifact_integrityfff189949f9a…

Three analytical modules run on one machine under one operator. Their signatures prove internal consistency and tamper-evidence, not independent verification or decentralisation.

Key Threats

No findings were reported. Every mandatory check completed against the downloaded artifact without detecting a policy violation.

On-chain Attestation

Network
devnet
Mechanism
Solana Devnet commitment anchored via Memo
Transaction
3GiP…eYhb
Slot
510317940
Commitment
f6ef9547619d…
Status
Confirmed on Solana Devnet
View on ExplorerExport proof bundle

Dependency Graph

nanoidlatest

Transitive dependencies appear once a scanner resolves this package.