uuid 11.0.5 → 11.1.1

package/README.md

@@ -2,24 +2,24 @@
   -- This file is auto-generated from README_js.md. Changes should be made there.
   -->
 
-# uuid [![CI](https://github.com/uuidjs/uuid/workflows/CI/badge.svg)](https://github.com/uuidjs/uuid/actions?query=workflow%3ACI) [![Browser](https://github.com/uuidjs/uuid/workflows/Browser/badge.svg)](https://github.com/uuidjs/uuid/actions?query=workflow%3ABrowser)
+# uuid [![CI](https://github.com/uuidjs/uuid/workflows/CI/badge.svg)](https://github.com/uuidjs/uuid/actions?query=workflow%3ACI) [![Browser](https://github.com/uuidjs/uuid/workflows/Browser/badge.svg)](https://github.com/uuidjs/uuid/actions/workflows/browser.yml)
 
-For the creation of [RFC9562](https://www.rfc-editor.org/rfc/rfc9562.html) (formally [RFC4122](https://www.rfc-editor.org/rfc/rfc4122.html)) UUIDs
+For the creation of [RFC9562](https://www.rfc-editor.org/rfc/rfc9562.html) (formerly [RFC4122](https://www.rfc-editor.org/rfc/rfc4122.html)) UUIDs
 
 - **Complete** - Support for all RFC9562 UUID versions
 - **Cross-platform** - Support for...
   - ESM & Common JS
-  - [Chrome, Safari, Firefox, Edge browsers](#support)
+  - [Typescript](#support)
+  - [Chrome, Safari, Firefox, and Edge](#support)
   - [NodeJS](#support)
   - [React Native / Expo](#react-native--expo)
-- **Secure** - Cryptographically-strong random values
-- **Compact** - No dependencies, [tree-shakable](https://developer.mozilla.org/en-US/docs/Glossary/Tree_shaking)
-- **CLI** - Includes the [`uuid` command line](#command-line) utility
-- **Typescript** - Types now included
+- **Secure** - Uses modern `crypto` API for random values
+- **Compact** - Zero-dependency, [tree-shakable](https://developer.mozilla.org/en-US/docs/Glossary/Tree_shaking)
+- **CLI** - [`uuid` command line](#command-line) utility
 
 <!-- prettier-ignore -->
 > [!NOTE]
-w> `uuid@11` is now available:  See the [CHANGELOG](./CHANGELOG.md) for details. TL;DR:
+> `uuid@11` is now available:  See the [CHANGELOG](./CHANGELOG.md) for details. TL;DR:
 > * TypeScript support is now included  (remove `@types/uuid` from your dependencies)
 > * Subtle changes to how the `options` arg is interpreted for `v1()`, `v6()`, and `v7()`. [See details](#options-handling-for-timestamp-uuids)
 > * Binary UUIDs are now `Uint8Array`s.  (May impact callers of `parse()`, `stringify()`,  or that pass an `option#buf` argument to `v1()`-`v7()`.)
@@ -180,7 +180,7 @@ Create an RFC version 1 (timestamp) UUID
 | [`options.nsecs = 0`] | RFC "timestamp" field (`Number` of nanoseconds to add to `msecs`, should be 0-10,000) |
 | [`options.random = (random)`] | `Array` of 16 random bytes (0-255) used to generate other fields, above |
 | [`options.rng`] | Alternative to `options.random`, a `Function` that returns an `Array` of 16 random bytes (0-255) |
-| [`buffer`] | `Array \| Buffer` If specified, uuid will be written here in byte-form, starting at `offset` |
+| [`buffer`] | `Uint8Array` or `Uint8Array` subtype (e.g. Node.js `Buffer`). If provided, binary UUID is written into the array, starting at `offset` |
 | [`offset` = 0] | `Number` Index to start writing UUID bytes in `buffer` |
 | _returns_ | UUID `String` if no `buffer` is specified, otherwise returns `buffer` |
 | _throws_ | `Error` if more than 10M UUIDs/sec are requested |
@@ -244,7 +244,7 @@ Create an RFC version 4 (random) UUID
 | [`options`] | `Object` with one or more of the following properties: |
 | [`options.random`] | `Array` of 16 random bytes (0-255) |
 | [`options.rng`] | Alternative to `options.random`, a `Function` that returns an `Array` of 16 random bytes (0-255) |
-| [`buffer`] | `Array \| Buffer` If specified, uuid will be written here in byte-form, starting at `offset` |
+| [`buffer`] | `Uint8Array` or `Uint8Array` subtype (e.g. Node.js `Buffer`). If provided, binary UUID is written into the array, starting at `offset` |
 | [`offset` = 0] | `Number` Index to start writing UUID bytes in `buffer` |
 | _returns_ | UUID `String` if no `buffer` is specified, otherwise returns `buffer` |
 
@@ -292,7 +292,7 @@ Create an RFC version 5 (namespace w/ SHA-1) UUID
 | --- | --- |
 | `name` | `String \| Array` |
 | `namespace` | `String \| Array[16]` Namespace UUID |
-| [`buffer`] | `Array \| Buffer` If specified, uuid will be written here in byte-form, starting at `offset` |
+| [`buffer`] | `Uint8Array` or `Uint8Array` subtype (e.g. Node.js `Buffer`). If provided, binary UUID is written into the array, starting at `offset` |
 | [`offset` = 0] | `Number` Index to start writing UUID bytes in `buffer` |
 | _returns_ | UUID `String` if no `buffer` is specified, otherwise returns `buffer` |
 
@@ -367,7 +367,7 @@ Create an RFC version 7 (random) UUID
 | [`options.random = (random)`] | `Array` of 16 random bytes (0-255) used to generate other fields, above |
 | [`options.rng`] | Alternative to `options.random`, a `Function` that returns an `Array` of 16 random bytes (0-255) |
 | [`options.seq = (random)`] | 32-bit sequence `Number` between 0 - 0xffffffff. This may be provided to help ensure uniqueness for UUIDs generated within the same millisecond time interval. Default = random value. |
-| [`buffer`] | `Array \| Buffer` If specified, uuid will be written here in byte-form, starting at `offset` |
+| [`buffer`] | `Uint8Array` or `Uint8Array` subtype (e.g. Node.js `Buffer`). If provided, binary UUID is written into the array, starting at `offset` |
 | [`offset` = 0] | `Number` Index to start writing UUID bytes in `buffer` |
 | _returns_ | UUID `String` if no `buffer` is specified, otherwise returns `buffer` |
 

package/dist/cjs/types.d.ts

@@ -1,4 +1,4 @@
-export type UUIDTypes = string | Uint8Array;
+export type UUIDTypes<TBuf extends Uint8Array = Uint8Array> = string | TBuf;
 export type Version1Options = {
     node?: Uint8Array;
     clockseq?: number;

package/dist/cjs/v1.d.ts

@@ -6,6 +6,6 @@ type V1State = {
     nsecs?: number;
 };
 declare function v1(options?: Version1Options, buf?: undefined, offset?: number): string;
-declare function v1(options: Version1Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v1<Buf extends Uint8Array = Uint8Array>(options: Version1Options | undefined, buf: Buf, offset?: number): Buf;
 export declare function updateV1State(state: V1State, now: number, rnds: Uint8Array): V1State;
 export default v1;

package/dist/cjs/v1.js

@@ -22,7 +22,7 @@ function v1(options, buf, offset) {
         updateV1State(_state, now, rnds);
         bytes = v1Bytes(rnds, _state.msecs, _state.nsecs, isV6 ? undefined : _state.clockseq, isV6 ? undefined : _state.node, buf, offset);
     }
-    return buf ? bytes : (0, stringify_js_1.unsafeStringify)(bytes);
+    return buf ?? (0, stringify_js_1.unsafeStringify)(bytes);
 }
 function updateV1State(state, now, rnds) {
     state.msecs ??= -Infinity;

package/dist/cjs/v3.d.ts

@@ -1,7 +1,7 @@
 import { UUIDTypes } from './types.js';
 export { DNS, URL } from './v35.js';
 declare function v3(value: string | Uint8Array, namespace: UUIDTypes, buf?: undefined, offset?: number): string;
-declare function v3(value: string | Uint8Array, namespace: UUIDTypes, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v3<TBuf extends Uint8Array = Uint8Array>(value: string | Uint8Array, namespace: UUIDTypes, buf: TBuf, offset?: number): TBuf;
 declare namespace v3 {
     var DNS: string;
     var URL: string;

package/dist/cjs/v35.d.ts

@@ -3,5 +3,5 @@ export declare function stringToBytes(str: string): Uint8Array;
 export declare const DNS = "6ba7b810-9dad-11d1-80b4-00c04fd430c8";
 export declare const URL = "6ba7b811-9dad-11d1-80b4-00c04fd430c8";
 type HashFunction = (bytes: Uint8Array) => Uint8Array;
-export default function v35(version: 0x30 | 0x50, hash: HashFunction, value: string | Uint8Array, namespace: UUIDTypes, buf?: Uint8Array, offset?: number): string | Uint8Array;
+export default function v35<TBuf extends Uint8Array = Uint8Array>(version: 0x30 | 0x50, hash: HashFunction, value: string | Uint8Array, namespace: UUIDTypes, buf?: TBuf, offset?: number): UUIDTypes<TBuf>;
 export {};

package/dist/cjs/v35.js

@@ -31,6 +31,9 @@ function v35(version, hash, value, namespace, buf, offset) {
     bytes[8] = (bytes[8] & 0x3f) | 0x80;
     if (buf) {
         offset = offset || 0;
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; ++i) {
             buf[offset + i] = bytes[i];
         }

package/dist/cjs/v4.d.ts

@@ -1,4 +1,4 @@
 import { Version4Options } from './types.js';
 declare function v4(options?: Version4Options, buf?: undefined, offset?: number): string;
-declare function v4(options: Version4Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v4<TBuf extends Uint8Array = Uint8Array>(options: Version4Options | undefined, buf: TBuf, offset?: number): TBuf;
 export default v4;

package/dist/cjs/v5.d.ts

@@ -1,7 +1,7 @@
 import { UUIDTypes } from './types.js';
 export { DNS, URL } from './v35.js';
 declare function v5(value: string | Uint8Array, namespace: UUIDTypes, buf?: undefined, offset?: number): string;
-declare function v5(value: string | Uint8Array, namespace: UUIDTypes, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v5<TBuf extends Uint8Array = Uint8Array>(value: string | Uint8Array, namespace: UUIDTypes, buf: TBuf, offset?: number): TBuf;
 declare namespace v5 {
     var DNS: string;
     var URL: string;

package/dist/cjs/v6.d.ts

@@ -1,4 +1,4 @@
 import { Version6Options } from './types.js';
 declare function v6(options?: Version6Options, buf?: undefined, offset?: number): string;
-declare function v6(options: Version6Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v6<TBuf extends Uint8Array = Uint8Array>(options: Version6Options | undefined, buf: TBuf, offset?: number): TBuf;
 export default v6;

package/dist/cjs/v6.js

@@ -9,6 +9,9 @@ function v6(options, buf, offset) {
     let bytes = (0, v1_js_1.default)({ ...options, _v6: true }, new Uint8Array(16));
     bytes = (0, v1ToV6_js_1.default)(bytes);
     if (buf) {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; i++) {
             buf[offset + i] = bytes[i];
         }

package/dist/cjs/v7.d.ts

@@ -4,6 +4,6 @@ type V7State = {
     seq?: number;
 };
 declare function v7(options?: Version7Options, buf?: undefined, offset?: number): string;
-declare function v7(options: Version7Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v7<TBuf extends Uint8Array = Uint8Array>(options: Version7Options | undefined, buf: TBuf, offset?: number): TBuf;
 export declare function updateV7State(state: V7State, now: number, rnds: Uint8Array): V7State;
 export default v7;

package/dist/cjs/v7.js

@@ -15,7 +15,7 @@ function v7(options, buf, offset) {
         updateV7State(_state, now, rnds);
         bytes = v7Bytes(rnds, _state.msecs, _state.seq, buf, offset);
     }
-    return buf ? bytes : (0, stringify_js_1.unsafeStringify)(bytes);
+    return buf ?? (0, stringify_js_1.unsafeStringify)(bytes);
 }
 function updateV7State(state, now, rnds) {
     state.msecs ??= -Infinity;

package/dist/cjs-browser/types.d.ts

@@ -1,4 +1,4 @@
-export type UUIDTypes = string | Uint8Array;
+export type UUIDTypes<TBuf extends Uint8Array = Uint8Array> = string | TBuf;
 export type Version1Options = {
     node?: Uint8Array;
     clockseq?: number;

package/dist/cjs-browser/v1.d.ts

@@ -6,6 +6,6 @@ type V1State = {
     nsecs?: number;
 };
 declare function v1(options?: Version1Options, buf?: undefined, offset?: number): string;
-declare function v1(options: Version1Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v1<Buf extends Uint8Array = Uint8Array>(options: Version1Options | undefined, buf: Buf, offset?: number): Buf;
 export declare function updateV1State(state: V1State, now: number, rnds: Uint8Array): V1State;
 export default v1;

package/dist/cjs-browser/v1.js

@@ -22,7 +22,7 @@ function v1(options, buf, offset) {
         updateV1State(_state, now, rnds);
         bytes = v1Bytes(rnds, _state.msecs, _state.nsecs, isV6 ? undefined : _state.clockseq, isV6 ? undefined : _state.node, buf, offset);
     }
-    return buf ? bytes : (0, stringify_js_1.unsafeStringify)(bytes);
+    return buf ?? (0, stringify_js_1.unsafeStringify)(bytes);
 }
 function updateV1State(state, now, rnds) {
     state.msecs ??= -Infinity;

package/dist/cjs-browser/v3.d.ts

@@ -1,7 +1,7 @@
 import { UUIDTypes } from './types.js';
 export { DNS, URL } from './v35.js';
 declare function v3(value: string | Uint8Array, namespace: UUIDTypes, buf?: undefined, offset?: number): string;
-declare function v3(value: string | Uint8Array, namespace: UUIDTypes, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v3<TBuf extends Uint8Array = Uint8Array>(value: string | Uint8Array, namespace: UUIDTypes, buf: TBuf, offset?: number): TBuf;
 declare namespace v3 {
     var DNS: string;
     var URL: string;

package/dist/cjs-browser/v35.d.ts

@@ -3,5 +3,5 @@ export declare function stringToBytes(str: string): Uint8Array;
 export declare const DNS = "6ba7b810-9dad-11d1-80b4-00c04fd430c8";
 export declare const URL = "6ba7b811-9dad-11d1-80b4-00c04fd430c8";
 type HashFunction = (bytes: Uint8Array) => Uint8Array;
-export default function v35(version: 0x30 | 0x50, hash: HashFunction, value: string | Uint8Array, namespace: UUIDTypes, buf?: Uint8Array, offset?: number): string | Uint8Array;
+export default function v35<TBuf extends Uint8Array = Uint8Array>(version: 0x30 | 0x50, hash: HashFunction, value: string | Uint8Array, namespace: UUIDTypes, buf?: TBuf, offset?: number): UUIDTypes<TBuf>;
 export {};

package/dist/cjs-browser/v35.js

@@ -31,6 +31,9 @@ function v35(version, hash, value, namespace, buf, offset) {
     bytes[8] = (bytes[8] & 0x3f) | 0x80;
     if (buf) {
         offset = offset || 0;
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; ++i) {
             buf[offset + i] = bytes[i];
         }

package/dist/cjs-browser/v4.d.ts

@@ -1,4 +1,4 @@
 import { Version4Options } from './types.js';
 declare function v4(options?: Version4Options, buf?: undefined, offset?: number): string;
-declare function v4(options: Version4Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v4<TBuf extends Uint8Array = Uint8Array>(options: Version4Options | undefined, buf: TBuf, offset?: number): TBuf;
 export default v4;

package/dist/cjs-browser/v5.d.ts

@@ -1,7 +1,7 @@
 import { UUIDTypes } from './types.js';
 export { DNS, URL } from './v35.js';
 declare function v5(value: string | Uint8Array, namespace: UUIDTypes, buf?: undefined, offset?: number): string;
-declare function v5(value: string | Uint8Array, namespace: UUIDTypes, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v5<TBuf extends Uint8Array = Uint8Array>(value: string | Uint8Array, namespace: UUIDTypes, buf: TBuf, offset?: number): TBuf;
 declare namespace v5 {
     var DNS: string;
     var URL: string;

package/dist/cjs-browser/v6.d.ts

@@ -1,4 +1,4 @@
 import { Version6Options } from './types.js';
 declare function v6(options?: Version6Options, buf?: undefined, offset?: number): string;
-declare function v6(options: Version6Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v6<TBuf extends Uint8Array = Uint8Array>(options: Version6Options | undefined, buf: TBuf, offset?: number): TBuf;
 export default v6;

package/dist/cjs-browser/v6.js

@@ -9,6 +9,9 @@ function v6(options, buf, offset) {
     let bytes = (0, v1_js_1.default)({ ...options, _v6: true }, new Uint8Array(16));
     bytes = (0, v1ToV6_js_1.default)(bytes);
     if (buf) {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; i++) {
             buf[offset + i] = bytes[i];
         }

package/dist/cjs-browser/v7.d.ts

@@ -4,6 +4,6 @@ type V7State = {
     seq?: number;
 };
 declare function v7(options?: Version7Options, buf?: undefined, offset?: number): string;
-declare function v7(options: Version7Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v7<TBuf extends Uint8Array = Uint8Array>(options: Version7Options | undefined, buf: TBuf, offset?: number): TBuf;
 export declare function updateV7State(state: V7State, now: number, rnds: Uint8Array): V7State;
 export default v7;

package/dist/cjs-browser/v7.js

@@ -15,7 +15,7 @@ function v7(options, buf, offset) {
         updateV7State(_state, now, rnds);
         bytes = v7Bytes(rnds, _state.msecs, _state.seq, buf, offset);
     }
-    return buf ? bytes : (0, stringify_js_1.unsafeStringify)(bytes);
+    return buf ?? (0, stringify_js_1.unsafeStringify)(bytes);
 }
 function updateV7State(state, now, rnds) {
     state.msecs ??= -Infinity;

package/dist/esm/types.d.ts

@@ -1,4 +1,4 @@
-export type UUIDTypes = string | Uint8Array;
+export type UUIDTypes<TBuf extends Uint8Array = Uint8Array> = string | TBuf;
 export type Version1Options = {
     node?: Uint8Array;
     clockseq?: number;

package/dist/esm/v1.d.ts

@@ -6,6 +6,6 @@ type V1State = {
     nsecs?: number;
 };
 declare function v1(options?: Version1Options, buf?: undefined, offset?: number): string;
-declare function v1(options: Version1Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v1<Buf extends Uint8Array = Uint8Array>(options: Version1Options | undefined, buf: Buf, offset?: number): Buf;
 export declare function updateV1State(state: V1State, now: number, rnds: Uint8Array): V1State;
 export default v1;

package/dist/esm/v1.js

@@ -19,7 +19,7 @@ function v1(options, buf, offset) {
         updateV1State(_state, now, rnds);
         bytes = v1Bytes(rnds, _state.msecs, _state.nsecs, isV6 ? undefined : _state.clockseq, isV6 ? undefined : _state.node, buf, offset);
     }
-    return buf ? bytes : unsafeStringify(bytes);
+    return buf ?? unsafeStringify(bytes);
 }
 export function updateV1State(state, now, rnds) {
     state.msecs ??= -Infinity;

package/dist/esm/v3.d.ts

@@ -1,7 +1,7 @@
 import { UUIDTypes } from './types.js';
 export { DNS, URL } from './v35.js';
 declare function v3(value: string | Uint8Array, namespace: UUIDTypes, buf?: undefined, offset?: number): string;
-declare function v3(value: string | Uint8Array, namespace: UUIDTypes, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v3<TBuf extends Uint8Array = Uint8Array>(value: string | Uint8Array, namespace: UUIDTypes, buf: TBuf, offset?: number): TBuf;
 declare namespace v3 {
     var DNS: string;
     var URL: string;

package/dist/esm/v35.d.ts

@@ -3,5 +3,5 @@ export declare function stringToBytes(str: string): Uint8Array;
 export declare const DNS = "6ba7b810-9dad-11d1-80b4-00c04fd430c8";
 export declare const URL = "6ba7b811-9dad-11d1-80b4-00c04fd430c8";
 type HashFunction = (bytes: Uint8Array) => Uint8Array;
-export default function v35(version: 0x30 | 0x50, hash: HashFunction, value: string | Uint8Array, namespace: UUIDTypes, buf?: Uint8Array, offset?: number): string | Uint8Array;
+export default function v35<TBuf extends Uint8Array = Uint8Array>(version: 0x30 | 0x50, hash: HashFunction, value: string | Uint8Array, namespace: UUIDTypes, buf?: TBuf, offset?: number): UUIDTypes<TBuf>;
 export {};

package/dist/esm/v35.js

@@ -27,6 +27,9 @@ export default function v35(version, hash, value, namespace, buf, offset) {
     bytes[8] = (bytes[8] & 0x3f) | 0x80;
     if (buf) {
         offset = offset || 0;
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; ++i) {
             buf[offset + i] = bytes[i];
         }

package/dist/esm/v4.d.ts

@@ -1,4 +1,4 @@
 import { Version4Options } from './types.js';
 declare function v4(options?: Version4Options, buf?: undefined, offset?: number): string;
-declare function v4(options: Version4Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v4<TBuf extends Uint8Array = Uint8Array>(options: Version4Options | undefined, buf: TBuf, offset?: number): TBuf;
 export default v4;

package/dist/esm/v5.d.ts

@@ -1,7 +1,7 @@
 import { UUIDTypes } from './types.js';
 export { DNS, URL } from './v35.js';
 declare function v5(value: string | Uint8Array, namespace: UUIDTypes, buf?: undefined, offset?: number): string;
-declare function v5(value: string | Uint8Array, namespace: UUIDTypes, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v5<TBuf extends Uint8Array = Uint8Array>(value: string | Uint8Array, namespace: UUIDTypes, buf: TBuf, offset?: number): TBuf;
 declare namespace v5 {
     var DNS: string;
     var URL: string;

package/dist/esm/v6.d.ts

@@ -1,4 +1,4 @@
 import { Version6Options } from './types.js';
 declare function v6(options?: Version6Options, buf?: undefined, offset?: number): string;
-declare function v6(options: Version6Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v6<TBuf extends Uint8Array = Uint8Array>(options: Version6Options | undefined, buf: TBuf, offset?: number): TBuf;
 export default v6;

package/dist/esm/v6.js

@@ -7,6 +7,9 @@ function v6(options, buf, offset) {
     let bytes = v1({ ...options, _v6: true }, new Uint8Array(16));
     bytes = v1ToV6(bytes);
     if (buf) {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; i++) {
             buf[offset + i] = bytes[i];
         }

package/dist/esm/v7.d.ts

@@ -4,6 +4,6 @@ type V7State = {
     seq?: number;
 };
 declare function v7(options?: Version7Options, buf?: undefined, offset?: number): string;
-declare function v7(options: Version7Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v7<TBuf extends Uint8Array = Uint8Array>(options: Version7Options | undefined, buf: TBuf, offset?: number): TBuf;
 export declare function updateV7State(state: V7State, now: number, rnds: Uint8Array): V7State;
 export default v7;

package/dist/esm/v7.js

@@ -12,7 +12,7 @@ function v7(options, buf, offset) {
         updateV7State(_state, now, rnds);
         bytes = v7Bytes(rnds, _state.msecs, _state.seq, buf, offset);
     }
-    return buf ? bytes : unsafeStringify(bytes);
+    return buf ?? unsafeStringify(bytes);
 }
 export function updateV7State(state, now, rnds) {
     state.msecs ??= -Infinity;

package/dist/esm-browser/types.d.ts

@@ -1,4 +1,4 @@
-export type UUIDTypes = string | Uint8Array;
+export type UUIDTypes<TBuf extends Uint8Array = Uint8Array> = string | TBuf;
 export type Version1Options = {
     node?: Uint8Array;
     clockseq?: number;

package/dist/esm-browser/v1.d.ts

@@ -6,6 +6,6 @@ type V1State = {
     nsecs?: number;
 };
 declare function v1(options?: Version1Options, buf?: undefined, offset?: number): string;
-declare function v1(options: Version1Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v1<Buf extends Uint8Array = Uint8Array>(options: Version1Options | undefined, buf: Buf, offset?: number): Buf;
 export declare function updateV1State(state: V1State, now: number, rnds: Uint8Array): V1State;
 export default v1;

package/dist/esm-browser/v1.js

@@ -19,7 +19,7 @@ function v1(options, buf, offset) {
         updateV1State(_state, now, rnds);
         bytes = v1Bytes(rnds, _state.msecs, _state.nsecs, isV6 ? undefined : _state.clockseq, isV6 ? undefined : _state.node, buf, offset);
     }
-    return buf ? bytes : unsafeStringify(bytes);
+    return buf ?? unsafeStringify(bytes);
 }
 export function updateV1State(state, now, rnds) {
     state.msecs ??= -Infinity;

package/dist/esm-browser/v3.d.ts

@@ -1,7 +1,7 @@
 import { UUIDTypes } from './types.js';
 export { DNS, URL } from './v35.js';
 declare function v3(value: string | Uint8Array, namespace: UUIDTypes, buf?: undefined, offset?: number): string;
-declare function v3(value: string | Uint8Array, namespace: UUIDTypes, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v3<TBuf extends Uint8Array = Uint8Array>(value: string | Uint8Array, namespace: UUIDTypes, buf: TBuf, offset?: number): TBuf;
 declare namespace v3 {
     var DNS: string;
     var URL: string;

package/dist/esm-browser/v35.d.ts

@@ -3,5 +3,5 @@ export declare function stringToBytes(str: string): Uint8Array;
 export declare const DNS = "6ba7b810-9dad-11d1-80b4-00c04fd430c8";
 export declare const URL = "6ba7b811-9dad-11d1-80b4-00c04fd430c8";
 type HashFunction = (bytes: Uint8Array) => Uint8Array;
-export default function v35(version: 0x30 | 0x50, hash: HashFunction, value: string | Uint8Array, namespace: UUIDTypes, buf?: Uint8Array, offset?: number): string | Uint8Array;
+export default function v35<TBuf extends Uint8Array = Uint8Array>(version: 0x30 | 0x50, hash: HashFunction, value: string | Uint8Array, namespace: UUIDTypes, buf?: TBuf, offset?: number): UUIDTypes<TBuf>;
 export {};

package/dist/esm-browser/v35.js

@@ -27,6 +27,9 @@ export default function v35(version, hash, value, namespace, buf, offset) {
     bytes[8] = (bytes[8] & 0x3f) | 0x80;
     if (buf) {
         offset = offset || 0;
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; ++i) {
             buf[offset + i] = bytes[i];
         }

package/dist/esm-browser/v4.d.ts

@@ -1,4 +1,4 @@
 import { Version4Options } from './types.js';
 declare function v4(options?: Version4Options, buf?: undefined, offset?: number): string;
-declare function v4(options: Version4Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v4<TBuf extends Uint8Array = Uint8Array>(options: Version4Options | undefined, buf: TBuf, offset?: number): TBuf;
 export default v4;

package/dist/esm-browser/v5.d.ts

@@ -1,7 +1,7 @@
 import { UUIDTypes } from './types.js';
 export { DNS, URL } from './v35.js';
 declare function v5(value: string | Uint8Array, namespace: UUIDTypes, buf?: undefined, offset?: number): string;
-declare function v5(value: string | Uint8Array, namespace: UUIDTypes, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v5<TBuf extends Uint8Array = Uint8Array>(value: string | Uint8Array, namespace: UUIDTypes, buf: TBuf, offset?: number): TBuf;
 declare namespace v5 {
     var DNS: string;
     var URL: string;

package/dist/esm-browser/v6.d.ts

@@ -1,4 +1,4 @@
 import { Version6Options } from './types.js';
 declare function v6(options?: Version6Options, buf?: undefined, offset?: number): string;
-declare function v6(options: Version6Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v6<TBuf extends Uint8Array = Uint8Array>(options: Version6Options | undefined, buf: TBuf, offset?: number): TBuf;
 export default v6;

package/dist/esm-browser/v6.js

@@ -7,6 +7,9 @@ function v6(options, buf, offset) {
     let bytes = v1({ ...options, _v6: true }, new Uint8Array(16));
     bytes = v1ToV6(bytes);
     if (buf) {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; i++) {
             buf[offset + i] = bytes[i];
         }

package/dist/esm-browser/v7.d.ts

@@ -4,6 +4,6 @@ type V7State = {
     seq?: number;
 };
 declare function v7(options?: Version7Options, buf?: undefined, offset?: number): string;
-declare function v7(options: Version7Options | undefined, buf: Uint8Array, offset?: number): Uint8Array;
+declare function v7<TBuf extends Uint8Array = Uint8Array>(options: Version7Options | undefined, buf: TBuf, offset?: number): TBuf;
 export declare function updateV7State(state: V7State, now: number, rnds: Uint8Array): V7State;
 export default v7;

package/dist/esm-browser/v7.js

@@ -12,7 +12,7 @@ function v7(options, buf, offset) {
         updateV7State(_state, now, rnds);
         bytes = v7Bytes(rnds, _state.msecs, _state.seq, buf, offset);
     }
-    return buf ? bytes : unsafeStringify(bytes);
+    return buf ?? unsafeStringify(bytes);
 }
 export function updateV7State(state, now, rnds) {
     state.msecs ??= -Infinity;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "uuid",
-  "version": "11.0.5",
+  "version": "11.1.1",
   "description": "RFC9562 UUIDs",
   "type": "module",
   "funding": [