uuid 11.0.3 → 11.0.5

package/README.md

@@ -2,16 +2,15 @@
   -- This file is auto-generated from README_js.md. Changes should be made there.
   -->
 
-
 # uuid [![CI](https://github.com/uuidjs/uuid/workflows/CI/badge.svg)](https://github.com/uuidjs/uuid/actions?query=workflow%3ACI) [![Browser](https://github.com/uuidjs/uuid/workflows/Browser/badge.svg)](https://github.com/uuidjs/uuid/actions?query=workflow%3ABrowser)
 
 For the creation of [RFC9562](https://www.rfc-editor.org/rfc/rfc9562.html) (formally [RFC4122](https://www.rfc-editor.org/rfc/rfc4122.html)) UUIDs
 
 - **Complete** - Support for all RFC9562 UUID versions
-- **Cross-platform** - Support for ...
-  - CommonJS, [ECMAScript Modules](#ecmascript-modules)
-  - NodeJS 16+ ([LTS releases](https://github.com/nodejs/Release))
-  - Chrome, Safari, Firefox, Edge browsers
+- **Cross-platform** - Support for...
+  - ESM & Common JS
+  - [Chrome, Safari, Firefox, Edge browsers](#support)
+  - [NodeJS](#support)
   - [React Native / Expo](#react-native--expo)
 - **Secure** - Cryptographically-strong random values
 - **Compact** - No dependencies, [tree-shakable](https://developer.mozilla.org/en-US/docs/Glossary/Tree_shaking)
@@ -117,13 +116,13 @@ Example:
 import { parse as uuidParse } from 'uuid';
 
 // Parse a UUID
-uuidParse('6ec0bd7f-11c0-43da-975e-2a8ad9ebae0b'); // ⇨ 
-  // Uint8Array(16) [
-  //   110, 192, 189, 127,  17,
-  //   192,  67, 218, 151,  94,
-  //    42, 138, 217, 235, 174,
-  //    11
-  // ]
+uuidParse('6ec0bd7f-11c0-43da-975e-2a8ad9ebae0b'); // ⇨
+// Uint8Array(16) [
+//   110, 192, 189, 127,  17,
+//   192,  67, 218, 151,  94,
+//    42, 138, 217, 235, 174,
+//    11
+// ]
 ```
 
 ### uuid.stringify(arr[, offset])
@@ -367,7 +366,7 @@ Create an RFC version 7 (random) UUID
 | [`options.msecs = (current time)`] | RFC "timestamp" field (`Number` of milliseconds, unix epoch) |
 | [`options.random = (random)`] | `Array` of 16 random bytes (0-255) used to generate other fields, above |
 | [`options.rng`] | Alternative to `options.random`, a `Function` that returns an `Array` of 16 random bytes (0-255) |
-| [`options.seq = (random)`] | 32-bit sequence `Number` between 0 - 0xffffffff. This may be provided to help insure uniqueness for UUIDs generated within the same millisecond time interval. Default = random value. |
+| [`options.seq = (random)`] | 32-bit sequence `Number` between 0 - 0xffffffff. This may be provided to help ensure uniqueness for UUIDs generated within the same millisecond time interval. Default = random value. |
 | [`buffer`] | `Array \| Buffer` If specified, uuid will be written here in byte-form, starting at `offset` |
 | [`offset` = 0] | `Number` Index to start writing UUID bytes in `buffer` |
 | _returns_ | UUID `String` if no `buffer` is specified, otherwise returns `buffer` |
@@ -475,14 +474,28 @@ defined by RFC9562
 
 ## `options` Handling for Timestamp UUIDs
 
-Prior to `uuid@11`, it was possible for `options` state to interfere with the internal state used to insure uniqueness of timestamp-based UUIDs (the `v1()`, `v6()`, and `v7()` methods). Starting with `uuid@11`, this issue has been addressed by using the presence of the `options` argument as a flag to select between two possible behaviors:
+Prior to `uuid@11`, it was possible for `options` state to interfere with the internal state used to ensure uniqueness of timestamp-based UUIDs (the `v1()`, `v6()`, and `v7()` methods). Starting with `uuid@11`, this issue has been addressed by using the presence of the `options` argument as a flag to select between two possible behaviors:
 
 - Without `options`: Internal state is utilized to improve UUID uniqueness.
 - With `options`: Internal state is **NOT** used and, instead, appropriate defaults are applied as needed.
 
+## Support
+
+**Browsers**: `uuid` [builds are tested](/uuidjs/uuid/blob/main/wdio.conf.js) against the latest version of desktop Chrome, Safari, Firefox, and Edge. Mobile versions of these same browsers are expected to work but aren't currently tested.
+
+**Node**: `uuid` [builds are tested](https://github.com/uuidjs/uuid/blob/main/.github/workflows/ci.yml#L26-L27) against node ([LTS releases](https://github.com/nodejs/Release)), plus one prior. E.g. `node@18` is in maintainence mode, and `node@22` is the current LTS release. So `uuid` supports `node@16`-`node@22`.
+
+**Typescript**: TS versions released within the past two years are supported. [source](https://github.com/microsoft/TypeScript/issues/49088#issuecomment-2468723715)
+
 ## Known issues
 
-### React Native / Expo
+<!-- This header is referenced as an anchor in src/rng-browser.ts -->
+
+### "getRandomValues() not supported"
+
+This error occurs in environments where the standard [`crypto.getRandomValues()`](https://developer.mozilla.org/en-US/docs/Web/API/Crypto/getRandomValues) API is not supported. This issue can be resolved by adding an appropriate polyfill:
+
+#### React Native / Expo
 
 1. Install [`react-native-get-random-values`](https://github.com/LinusU/react-native-get-random-values#readme)
 1. Import it _before_ `uuid`. Since `uuid` might also appear as a transitive dependency of some other imports it's safest to just import `react-native-get-random-values` as the very first thing in your entry point:
@@ -494,4 +507,4 @@ import { v4 as uuidv4 } from 'uuid';
 
 ---
 
-Markdown generated from [README_js.md](README_js.md) by <a href="https://github.com/broofa/runmd"><image height="12px" src="https://camo.githubusercontent.com/5c7c603cd1e6a43370b0a5063d457e0dabb74cf317adc7baba183acb686ee8d0/687474703a2f2f692e696d6775722e636f6d2f634a4b6f3662552e706e67" /></a>
+Markdown generated from [README_js.md](README_js.md) by <a href="https://github.com/broofa/runmd"><image height="13" src="https://camo.githubusercontent.com/5c7c603cd1e6a43370b0a5063d457e0dabb74cf317adc7baba183acb686ee8d0/687474703a2f2f692e696d6775722e636f6d2f634a4b6f3662552e706e67" /></a>

package/dist/cjs/md5.d.ts

@@ -1,2 +1,4 @@
+/// <reference types="node" />
+/// <reference types="node" />
 declare function md5(bytes: Uint8Array): Buffer;
 export default md5;

package/dist/cjs/native.d.ts

@@ -1,3 +1,4 @@
+/// <reference types="node" />
 import { randomUUID } from 'crypto';
 declare const _default: {
     randomUUID: typeof randomUUID;

package/dist/cjs/rng.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = rng;
 const crypto_1 = require("crypto");
 const rnds8Pool = new Uint8Array(256);
 let poolPtr = rnds8Pool.length;
@@ -11,3 +10,4 @@ function rng() {
     }
     return rnds8Pool.slice(poolPtr, (poolPtr += 16));
 }
+exports.default = rng;

package/dist/cjs/sha1.d.ts

@@ -1,2 +1,4 @@
+/// <reference types="node" />
+/// <reference types="node" />
 declare function sha1(bytes: Uint8Array): Buffer;
 export default sha1;

package/dist/cjs/stringify.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.unsafeStringify = unsafeStringify;
+exports.unsafeStringify = void 0;
 const validate_js_1 = require("./validate.js");
 const byteToHex = [];
 for (let i = 0; i < 256; ++i) {
@@ -28,6 +28,7 @@ function unsafeStringify(arr, offset = 0) {
         byteToHex[arr[offset + 14]] +
         byteToHex[arr[offset + 15]]).toLowerCase();
 }
+exports.unsafeStringify = unsafeStringify;
 function stringify(arr, offset = 0) {
     const uuid = unsafeStringify(arr, offset);
     if (!(0, validate_js_1.default)(uuid)) {

package/dist/cjs/v1.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.updateV1State = updateV1State;
+exports.updateV1State = void 0;
 const rng_js_1 = require("./rng.js");
 const stringify_js_1 = require("./stringify.js");
 const _state = {};
@@ -48,11 +48,20 @@ function updateV1State(state, now, rnds) {
     state.msecs = now;
     return state;
 }
+exports.updateV1State = updateV1State;
 function v1Bytes(rnds, msecs, nsecs, clockseq, node, buf, offset = 0) {
+    if (rnds.length < 16) {
+        throw new Error('Random bytes length must be >= 16');
+    }
     if (!buf) {
         buf = new Uint8Array(16);
         offset = 0;
     }
+    else {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
+    }
     msecs ??= Date.now();
     nsecs ??= 0;
     clockseq ??= ((rnds[8] << 8) | rnds[9]) & 0x3fff;

package/dist/cjs/v1ToV6.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = v1ToV6;
 const parse_js_1 = require("./parse.js");
 const stringify_js_1 = require("./stringify.js");
 function v1ToV6(uuid) {
@@ -8,6 +7,7 @@ function v1ToV6(uuid) {
     const v6Bytes = _v1ToV6(v1Bytes);
     return typeof uuid === 'string' ? (0, stringify_js_1.unsafeStringify)(v6Bytes) : v6Bytes;
 }
+exports.default = v1ToV6;
 function _v1ToV6(v1Bytes) {
     return Uint8Array.of(((v1Bytes[6] & 0x0f) << 4) | ((v1Bytes[7] >> 4) & 0x0f), ((v1Bytes[7] & 0x0f) << 4) | ((v1Bytes[4] & 0xf0) >> 4), ((v1Bytes[4] & 0x0f) << 4) | ((v1Bytes[5] & 0xf0) >> 4), ((v1Bytes[5] & 0x0f) << 4) | ((v1Bytes[0] & 0xf0) >> 4), ((v1Bytes[0] & 0x0f) << 4) | ((v1Bytes[1] & 0xf0) >> 4), ((v1Bytes[1] & 0x0f) << 4) | ((v1Bytes[2] & 0xf0) >> 4), 0x60 | (v1Bytes[2] & 0x0f), v1Bytes[3], v1Bytes[8], v1Bytes[9], v1Bytes[10], v1Bytes[11], v1Bytes[12], v1Bytes[13], v1Bytes[14], v1Bytes[15]);
 }

package/dist/cjs/v35.js

@@ -1,8 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.URL = exports.DNS = void 0;
-exports.stringToBytes = stringToBytes;
-exports.default = v35;
+exports.URL = exports.DNS = exports.stringToBytes = void 0;
 const parse_js_1 = require("./parse.js");
 const stringify_js_1 = require("./stringify.js");
 function stringToBytes(str) {
@@ -13,6 +11,7 @@ function stringToBytes(str) {
     }
     return bytes;
 }
+exports.stringToBytes = stringToBytes;
 exports.DNS = '6ba7b810-9dad-11d1-80b4-00c04fd430c8';
 exports.URL = '6ba7b811-9dad-11d1-80b4-00c04fd430c8';
 function v35(version, hash, value, namespace, buf, offset) {
@@ -39,3 +38,4 @@ function v35(version, hash, value, namespace, buf, offset) {
     }
     return (0, stringify_js_1.unsafeStringify)(bytes);
 }
+exports.default = v35;

package/dist/cjs/v4.js

@@ -8,11 +8,17 @@ function v4(options, buf, offset) {
         return native_js_1.default.randomUUID();
     }
     options = options || {};
-    const rnds = options.random || (options.rng || rng_js_1.default)();
+    const rnds = options.random ?? options.rng?.() ?? (0, rng_js_1.default)();
+    if (rnds.length < 16) {
+        throw new Error('Random bytes length must be >= 16');
+    }
     rnds[6] = (rnds[6] & 0x0f) | 0x40;
     rnds[8] = (rnds[8] & 0x3f) | 0x80;
     if (buf) {
         offset = offset || 0;
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; ++i) {
             buf[offset + i] = rnds[i];
         }

package/dist/cjs/v6ToV1.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = v6ToV1;
 const parse_js_1 = require("./parse.js");
 const stringify_js_1 = require("./stringify.js");
 function v6ToV1(uuid) {
@@ -8,6 +7,7 @@ function v6ToV1(uuid) {
     const v1Bytes = _v6ToV1(v6Bytes);
     return typeof uuid === 'string' ? (0, stringify_js_1.unsafeStringify)(v1Bytes) : v1Bytes;
 }
+exports.default = v6ToV1;
 function _v6ToV1(v6Bytes) {
     return Uint8Array.of(((v6Bytes[3] & 0x0f) << 4) | ((v6Bytes[4] >> 4) & 0x0f), ((v6Bytes[4] & 0x0f) << 4) | ((v6Bytes[5] & 0xf0) >> 4), ((v6Bytes[5] & 0x0f) << 4) | (v6Bytes[6] & 0x0f), v6Bytes[7], ((v6Bytes[1] & 0x0f) << 4) | ((v6Bytes[2] & 0xf0) >> 4), ((v6Bytes[2] & 0x0f) << 4) | ((v6Bytes[3] & 0xf0) >> 4), 0x10 | ((v6Bytes[0] & 0xf0) >> 4), ((v6Bytes[0] & 0x0f) << 4) | ((v6Bytes[1] & 0xf0) >> 4), v6Bytes[8], v6Bytes[9], v6Bytes[10], v6Bytes[11], v6Bytes[12], v6Bytes[13], v6Bytes[14], v6Bytes[15]);
 }

package/dist/cjs/v7.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.updateV7State = updateV7State;
+exports.updateV7State = void 0;
 const rng_js_1 = require("./rng.js");
 const stringify_js_1 = require("./stringify.js");
 const _state = {};
@@ -32,11 +32,20 @@ function updateV7State(state, now, rnds) {
     }
     return state;
 }
+exports.updateV7State = updateV7State;
 function v7Bytes(rnds, msecs, seq, buf, offset = 0) {
+    if (rnds.length < 16) {
+        throw new Error('Random bytes length must be >= 16');
+    }
     if (!buf) {
         buf = new Uint8Array(16);
         offset = 0;
     }
+    else {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
+    }
     msecs ??= Date.now();
     seq ??= ((rnds[6] * 0x7f) << 24) | (rnds[7] << 16) | (rnds[8] << 8) | rnds[9];
     buf[offset++] = (msecs / 0x10000000000) & 0xff;

package/dist/cjs-browser/rng.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = rng;
 let getRandomValues;
 const rnds8 = new Uint8Array(16);
 function rng() {
@@ -12,3 +11,4 @@ function rng() {
     }
     return getRandomValues(rnds8);
 }
+exports.default = rng;

package/dist/cjs-browser/stringify.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.unsafeStringify = unsafeStringify;
+exports.unsafeStringify = void 0;
 const validate_js_1 = require("./validate.js");
 const byteToHex = [];
 for (let i = 0; i < 256; ++i) {
@@ -28,6 +28,7 @@ function unsafeStringify(arr, offset = 0) {
         byteToHex[arr[offset + 14]] +
         byteToHex[arr[offset + 15]]).toLowerCase();
 }
+exports.unsafeStringify = unsafeStringify;
 function stringify(arr, offset = 0) {
     const uuid = unsafeStringify(arr, offset);
     if (!(0, validate_js_1.default)(uuid)) {

package/dist/cjs-browser/v1.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.updateV1State = updateV1State;
+exports.updateV1State = void 0;
 const rng_js_1 = require("./rng.js");
 const stringify_js_1 = require("./stringify.js");
 const _state = {};
@@ -48,11 +48,20 @@ function updateV1State(state, now, rnds) {
     state.msecs = now;
     return state;
 }
+exports.updateV1State = updateV1State;
 function v1Bytes(rnds, msecs, nsecs, clockseq, node, buf, offset = 0) {
+    if (rnds.length < 16) {
+        throw new Error('Random bytes length must be >= 16');
+    }
     if (!buf) {
         buf = new Uint8Array(16);
         offset = 0;
     }
+    else {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
+    }
     msecs ??= Date.now();
     nsecs ??= 0;
     clockseq ??= ((rnds[8] << 8) | rnds[9]) & 0x3fff;

package/dist/cjs-browser/v1ToV6.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = v1ToV6;
 const parse_js_1 = require("./parse.js");
 const stringify_js_1 = require("./stringify.js");
 function v1ToV6(uuid) {
@@ -8,6 +7,7 @@ function v1ToV6(uuid) {
     const v6Bytes = _v1ToV6(v1Bytes);
     return typeof uuid === 'string' ? (0, stringify_js_1.unsafeStringify)(v6Bytes) : v6Bytes;
 }
+exports.default = v1ToV6;
 function _v1ToV6(v1Bytes) {
     return Uint8Array.of(((v1Bytes[6] & 0x0f) << 4) | ((v1Bytes[7] >> 4) & 0x0f), ((v1Bytes[7] & 0x0f) << 4) | ((v1Bytes[4] & 0xf0) >> 4), ((v1Bytes[4] & 0x0f) << 4) | ((v1Bytes[5] & 0xf0) >> 4), ((v1Bytes[5] & 0x0f) << 4) | ((v1Bytes[0] & 0xf0) >> 4), ((v1Bytes[0] & 0x0f) << 4) | ((v1Bytes[1] & 0xf0) >> 4), ((v1Bytes[1] & 0x0f) << 4) | ((v1Bytes[2] & 0xf0) >> 4), 0x60 | (v1Bytes[2] & 0x0f), v1Bytes[3], v1Bytes[8], v1Bytes[9], v1Bytes[10], v1Bytes[11], v1Bytes[12], v1Bytes[13], v1Bytes[14], v1Bytes[15]);
 }

package/dist/cjs-browser/v35.js

@@ -1,8 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.URL = exports.DNS = void 0;
-exports.stringToBytes = stringToBytes;
-exports.default = v35;
+exports.URL = exports.DNS = exports.stringToBytes = void 0;
 const parse_js_1 = require("./parse.js");
 const stringify_js_1 = require("./stringify.js");
 function stringToBytes(str) {
@@ -13,6 +11,7 @@ function stringToBytes(str) {
     }
     return bytes;
 }
+exports.stringToBytes = stringToBytes;
 exports.DNS = '6ba7b810-9dad-11d1-80b4-00c04fd430c8';
 exports.URL = '6ba7b811-9dad-11d1-80b4-00c04fd430c8';
 function v35(version, hash, value, namespace, buf, offset) {
@@ -39,3 +38,4 @@ function v35(version, hash, value, namespace, buf, offset) {
     }
     return (0, stringify_js_1.unsafeStringify)(bytes);
 }
+exports.default = v35;

package/dist/cjs-browser/v4.js

@@ -8,11 +8,17 @@ function v4(options, buf, offset) {
         return native_js_1.default.randomUUID();
     }
     options = options || {};
-    const rnds = options.random || (options.rng || rng_js_1.default)();
+    const rnds = options.random ?? options.rng?.() ?? (0, rng_js_1.default)();
+    if (rnds.length < 16) {
+        throw new Error('Random bytes length must be >= 16');
+    }
     rnds[6] = (rnds[6] & 0x0f) | 0x40;
     rnds[8] = (rnds[8] & 0x3f) | 0x80;
     if (buf) {
         offset = offset || 0;
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; ++i) {
             buf[offset + i] = rnds[i];
         }

package/dist/cjs-browser/v6ToV1.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = v6ToV1;
 const parse_js_1 = require("./parse.js");
 const stringify_js_1 = require("./stringify.js");
 function v6ToV1(uuid) {
@@ -8,6 +7,7 @@ function v6ToV1(uuid) {
     const v1Bytes = _v6ToV1(v6Bytes);
     return typeof uuid === 'string' ? (0, stringify_js_1.unsafeStringify)(v1Bytes) : v1Bytes;
 }
+exports.default = v6ToV1;
 function _v6ToV1(v6Bytes) {
     return Uint8Array.of(((v6Bytes[3] & 0x0f) << 4) | ((v6Bytes[4] >> 4) & 0x0f), ((v6Bytes[4] & 0x0f) << 4) | ((v6Bytes[5] & 0xf0) >> 4), ((v6Bytes[5] & 0x0f) << 4) | (v6Bytes[6] & 0x0f), v6Bytes[7], ((v6Bytes[1] & 0x0f) << 4) | ((v6Bytes[2] & 0xf0) >> 4), ((v6Bytes[2] & 0x0f) << 4) | ((v6Bytes[3] & 0xf0) >> 4), 0x10 | ((v6Bytes[0] & 0xf0) >> 4), ((v6Bytes[0] & 0x0f) << 4) | ((v6Bytes[1] & 0xf0) >> 4), v6Bytes[8], v6Bytes[9], v6Bytes[10], v6Bytes[11], v6Bytes[12], v6Bytes[13], v6Bytes[14], v6Bytes[15]);
 }

package/dist/cjs-browser/v7.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.updateV7State = updateV7State;
+exports.updateV7State = void 0;
 const rng_js_1 = require("./rng.js");
 const stringify_js_1 = require("./stringify.js");
 const _state = {};
@@ -32,11 +32,20 @@ function updateV7State(state, now, rnds) {
     }
     return state;
 }
+exports.updateV7State = updateV7State;
 function v7Bytes(rnds, msecs, seq, buf, offset = 0) {
+    if (rnds.length < 16) {
+        throw new Error('Random bytes length must be >= 16');
+    }
     if (!buf) {
         buf = new Uint8Array(16);
         offset = 0;
     }
+    else {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
+    }
     msecs ??= Date.now();
     seq ??= ((rnds[6] * 0x7f) << 24) | (rnds[7] << 16) | (rnds[8] << 8) | rnds[9];
     buf[offset++] = (msecs / 0x10000000000) & 0xff;

package/dist/esm/md5.d.ts

@@ -1,2 +1,4 @@
+/// <reference types="node" resolution-mode="require"/>
+/// <reference types="node" resolution-mode="require"/>
 declare function md5(bytes: Uint8Array): Buffer;
 export default md5;

package/dist/esm/native.d.ts

@@ -1,3 +1,4 @@
+/// <reference types="node" resolution-mode="require"/>
 import { randomUUID } from 'crypto';
 declare const _default: {
     randomUUID: typeof randomUUID;

package/dist/esm/sha1.d.ts

@@ -1,2 +1,4 @@
+/// <reference types="node" resolution-mode="require"/>
+/// <reference types="node" resolution-mode="require"/>
 declare function sha1(bytes: Uint8Array): Buffer;
 export default sha1;

package/dist/esm/v1.js

@@ -46,10 +46,18 @@ export function updateV1State(state, now, rnds) {
     return state;
 }
 function v1Bytes(rnds, msecs, nsecs, clockseq, node, buf, offset = 0) {
+    if (rnds.length < 16) {
+        throw new Error('Random bytes length must be >= 16');
+    }
     if (!buf) {
         buf = new Uint8Array(16);
         offset = 0;
     }
+    else {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
+    }
     msecs ??= Date.now();
     nsecs ??= 0;
     clockseq ??= ((rnds[8] << 8) | rnds[9]) & 0x3fff;

package/dist/esm/v4.js

@@ -6,11 +6,17 @@ function v4(options, buf, offset) {
         return native.randomUUID();
     }
     options = options || {};
-    const rnds = options.random || (options.rng || rng)();
+    const rnds = options.random ?? options.rng?.() ?? rng();
+    if (rnds.length < 16) {
+        throw new Error('Random bytes length must be >= 16');
+    }
     rnds[6] = (rnds[6] & 0x0f) | 0x40;
     rnds[8] = (rnds[8] & 0x3f) | 0x80;
     if (buf) {
         offset = offset || 0;
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; ++i) {
             buf[offset + i] = rnds[i];
         }

package/dist/esm/v7.js

@@ -30,10 +30,18 @@ export function updateV7State(state, now, rnds) {
     return state;
 }
 function v7Bytes(rnds, msecs, seq, buf, offset = 0) {
+    if (rnds.length < 16) {
+        throw new Error('Random bytes length must be >= 16');
+    }
     if (!buf) {
         buf = new Uint8Array(16);
         offset = 0;
     }
+    else {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
+    }
     msecs ??= Date.now();
     seq ??= ((rnds[6] * 0x7f) << 24) | (rnds[7] << 16) | (rnds[8] << 8) | rnds[9];
     buf[offset++] = (msecs / 0x10000000000) & 0xff;

package/dist/esm-browser/v1.js

@@ -46,10 +46,18 @@ export function updateV1State(state, now, rnds) {
     return state;
 }
 function v1Bytes(rnds, msecs, nsecs, clockseq, node, buf, offset = 0) {
+    if (rnds.length < 16) {
+        throw new Error('Random bytes length must be >= 16');
+    }
     if (!buf) {
         buf = new Uint8Array(16);
         offset = 0;
     }
+    else {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
+    }
     msecs ??= Date.now();
     nsecs ??= 0;
     clockseq ??= ((rnds[8] << 8) | rnds[9]) & 0x3fff;

package/dist/esm-browser/v4.js

@@ -6,11 +6,17 @@ function v4(options, buf, offset) {
         return native.randomUUID();
     }
     options = options || {};
-    const rnds = options.random || (options.rng || rng)();
+    const rnds = options.random ?? options.rng?.() ?? rng();
+    if (rnds.length < 16) {
+        throw new Error('Random bytes length must be >= 16');
+    }
     rnds[6] = (rnds[6] & 0x0f) | 0x40;
     rnds[8] = (rnds[8] & 0x3f) | 0x80;
     if (buf) {
         offset = offset || 0;
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; ++i) {
             buf[offset + i] = rnds[i];
         }

package/dist/esm-browser/v7.js

@@ -30,10 +30,18 @@ export function updateV7State(state, now, rnds) {
     return state;
 }
 function v7Bytes(rnds, msecs, seq, buf, offset = 0) {
+    if (rnds.length < 16) {
+        throw new Error('Random bytes length must be >= 16');
+    }
     if (!buf) {
         buf = new Uint8Array(16);
         offset = 0;
     }
+    else {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
+    }
     msecs ??= Date.now();
     seq ??= ((rnds[6] * 0x7f) << 24) | (rnds[7] << 16) | (rnds[8] << 8) | rnds[9];
     buf[offset++] = (msecs / 0x10000000000) & 0xff;