“Returns from a pool of 10m human-readable IDs”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₃(Db₂FPo)Md(Pa₃)
Referenced by 5 samples
Micro-behaviors
notable severity, 90% confident.
data/format
JavaScript locale-aware formatting call
notable severity, 85% confident.
data/serialize
Serializes an identifier as JSON
notable severity, 85% confident.
fs/file
Package script deletes files
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
baseline severity, 82% confident.
data/string
Searches strings with includes or indexOf
baseline severity, 80% confident.
process/info
Reads Node.js arguments through process.argv
component severity, 88% confident.
data/control-flow
Calls a matcher in a conditional expression
Metadata
notable severity, 95% confident.
package/files
JavaScript file under dist directory
notable severity, 90% confident.
package/manifest
Package declares TypeScript types entry
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 85% confident.
file
Source has multiple lines over 1000 characters
baseline severity, 80% confident.
file/profile
English function-word token "this"
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 95% confident.
library
Contains bundled or minified JavaScript
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest omits dependencies field
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 100% confident.
file/extension
JavaScript source filename extension
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
20 of 21 traits shown
Identity
| SHA-256 | ec01bd33c87f8f7fd5cf168cda11f3b595f82ade035d99d3d146d718f060e042 |
|---|---|
| Canonical SHA-256 | 36d9a17c3d5b8850a4e080710b1c0cdfe407bfc17729ba0b93ae3b884e7611d5 |
| Filename | [email protected] |
| Package | human-id |
| Version | 4.1.1 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/human-id/-/human-id-4.1.1.tgz |
Timeline
| First seen | 12 Aug 2026 11:51 UTC |
|---|---|
| First analyzed | 12 Aug 2026 11:51 UTC |
| Last analyzed | 26 Aug 2026 13:27 UTC |
| Last updated | 26 Aug 2026 13:29 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know