uuid is a JavaScript library for generating RFC-compliant UUIDs (RFC9562, formerly RFC4122). It provides APIs to create common UUID versions, validate and parse/serialize UUIDs, and includes a CLI tool, with support for TypeScript and major browsers and environments like Node.js and React Native.
Project status
- Actively maintained: Recent activity spans 2025-02 through 2026-05, with multiple patch and a major update, suggesting ongoing maintenance rather than a freeze (last upstream push on 2026-05-22).
- Updates cadence: Not perfectly regular, but there are several releases within a few months (for example, v14.0.0 on 2026-04-19, v12.0.1 and v11.1.1 on 2026-04-29, and v13.0.1 to v13.0.2 between 2026-04-28 and 2026-05-04).
AI summary generated 2026-06-04
Recent updates
v13.0.2
2026-05-04Release v13.0.2 notes only mention a provenance rerun (“rerelease to fix provenance”). The actual diff includes additional, user-visible code and packaging changes, including stricter buffer bounds validation for UUID v3/v6/v35-style byte writers and a restructuring of build output directories and package exports conditions.
v11.1.1
2026-04-29v11.1.1 is a small patch release. The release notes only mention a backport of a GHSA security fix, without describing specific behavioral changes.
Breakingv12.0.1
2026-04-29Release v12.0.1 release notes only mention a backport bug fix for GHSA-w5hq-g745-h8pq. The actual code diff from v11.1.1 to v12.0.1 includes additional changes that are not described in the provided release notes, including packaging/export changes and new runtime error behavior for buffer-offset edge cases.
Securityv13.0.1
2026-04-28v13.0.1 is a small patch release with a single documented backport. The code diff, however, shows additional behavioral changes beyond the release notes, including new runtime bounds checks when writing UUID bytes into user-provided buffers.
Securityv14.0.0
2026-04-19uuid v14.0.0 is a major release that removes Node 18 support and changes the implementation to rely on a globally available `crypto` (Node 20+). The diff also shows additional runtime hardening around caller-supplied buffer offsets, plus CI and release automation updates.
BreakingSecurityv13.0.0
2025-09-08v13.0.0 reorganizes the package build outputs and changes module export resolution so that the browser-oriented build is the default export target. The release notes only mention the export behavior change, but the diff shows multiple additional packaging and build-path changes that can affect deep imports and tooling.
Breakingv12.0.0
2025-09-05uuid v12.0.0 updates TypeScript to 5.2, removes CommonJS support, and drops Node.js 16 support. It also updates CI to test Node 24, and includes a v4 performance improvement plus a minor Node built-in import cleanup. The code diff also shows packaging and build output structure changes (dist layout and export conditions) beyond what is explicitly spelled out in the release notes.
BreakingFeaturesv11.1.0
2025-02-19v11.1.0 primarily updates the TypeScript typing around UUID generation functions to better preserve the specific Uint8Array subtype (such as Node.js Buffer) provided via the `buffer` option/argument. The release notes only mention this feature, and the code diff shows the same change applied across the internal UUID byte-writing paths.
Featuresv11.0.5
2025-01-09v11.0.5 is described as a small TypeScript-related bug fix, specifically adding a TS unit test and pinning the TypeScript version used by the test. The code diff, however, shows additional build and CI/test-harness changes beyond what is mentioned in the release notes.
v11.0.4
2025-01-05v11.0.4 is a small patch release focused on documentation and packaging hygiene, plus additional test coverage for invalid inputs to v1, v4, and v7. However, the code diff also introduces new runtime validation, adding explicit throws when the provided random bytes or buffer offset range are invalid.