diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml
index 2f4a009..20717ba 100644
--- a/supply-chain/audits.toml
+++ b/supply-chain/audits.toml
@@ -31,7 +31,7 @@ delta = "0.4.11 -> 0.4.13"
 
 [[trusted.esplugin]]
 criteria = "safe-to-deploy"
-user-id = 9999 # Oliver Hamlet (Ortham)
+user-id = 9999
 start = "2019-04-24"
 end = "2026-09-16"
 notes = "I'm the author."
diff --git a/supply-chain/config.toml b/supply-chain/config.toml
index b74135d..ecac627 100644
--- a/supply-chain/config.toml
+++ b/supply-chain/config.toml
@@ -76,10 +76,6 @@ criteria = "safe-to-deploy"
 version = "8.0.0"
 criteria = "safe-to-deploy"
 
-[[exemptions.oorandom]]
-version = "11.1.5"
-criteria = "safe-to-run"
-
 [[exemptions.pelite]]
 version = "0.10.0"
 criteria = "safe-to-deploy"
diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock
index c432919..699b409 100644
--- a/supply-chain/imports.lock
+++ b/supply-chain/imports.lock
@@ -15,13 +15,6 @@ user-id = 4484
 user-login = "hsivonen"
 user-name = "Henri Sivonen"
 
-[[publisher.esplugin]]
-version = "6.1.3"
-when = "2025-04-28"
-user-id = 9999
-user-login = "Ortham"
-user-name = "Oliver Hamlet"
-
 [[publisher.libc]]
 version = "0.2.176"
 when = "2025-09-23"
@@ -1427,6 +1420,13 @@ criteria = "safe-to-deploy"
 delta = "1.20.3 -> 1.21.1"
 aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
 
+[[audits.mozilla.audits.oorandom]]
+who = "Jan-Erik Rediger <jrediger@mozilla.com>"
+criteria = "safe-to-run"
+version = "11.1.5"
+notes = "Small random number generator, explicitly not cryptographically secure, no use of unsafe code, no dependencies"
+aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
+
 [[audits.mozilla.audits.rayon]]
 who = "Josh Stone <jistone@redhat.com>"
 criteria = "safe-to-deploy"