Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@lukeed/uuid
Advanced tools
@lukeed/uuid is a lightweight and fast library for generating universally unique identifiers (UUIDs). It supports generating UUIDs of versions 1, 4, and 5, making it versatile for various use cases where unique identifiers are required.
Generate UUID v1
Generates a UUID of version 1, which is based on the current timestamp and the MAC address of the machine.
const { v1 } = require('@lukeed/uuid');
const uuidV1 = v1();
console.log(uuidV1);
Generate UUID v4
Generates a UUID of version 4, which is based on random numbers.
const { v4 } = require('@lukeed/uuid');
const uuidV4 = v4();
console.log(uuidV4);
Generate UUID v5
Generates a UUID of version 5, which is based on a namespace and a name using SHA-1 hashing.
const { v5 } = require('@lukeed/uuid');
const uuidV5 = v5('namespace', 'name');
console.log(uuidV5);
The 'uuid' package is one of the most popular libraries for generating UUIDs. It supports versions 1, 3, 4, and 5. Compared to @lukeed/uuid, it is more widely used and has a larger community, but it is also slightly larger in size.
The 'short-uuid' package generates shorter, URL-friendly UUIDs. It is useful when you need a more compact representation of UUIDs. Unlike @lukeed/uuid, it focuses on providing shorter UUIDs rather than adhering strictly to the UUID standard.
The 'nanoid' package is a tiny, secure, URL-friendly unique string ID generator. It is much smaller in size compared to @lukeed/uuid and is often used for generating unique IDs in web applications where size and performance are critical.
A tiny (~230B) and fast UUID (v4) generator for Node and the browser.
This module offers two modes for your needs:
@lukeed/uuid
Math.random
to produce UUIDs.@lukeed/uuid/secure
crypto
module.Important:
Version1.0.0
only offered a "secure" implementation.
Inv2.0.0
, this is now exported as the"@lukeed/uuid/secure"
entry.
Additionally, this module is preconfigured for native ESM support in Node.js with fallback to CommonJS. It will also work with any Rollup and webpack configuration.
$ npm install --save @lukeed/uuid
There are two "versions" of @lukeed/uuid
available:
@lukeed/uuid
Size (gzip): 231 bytes
Availability: CommonJS, ES Module, UMD
Relies on Math.random
, which means that, while faster, this mode is not cryptographically secure.
Works in Node.js and all browsers.
@lukeed/uuid/secure
Size (gzip): 235 bytes
Availability: CommonJS, ES Module, UMD
Relies on the environment's crypto
module in order to produce cryptographically secure (CSPRNG) values.
Works in all versions of Node.js. Works in all browsers with crypto.getRandomValues()
support.
import { v4 as uuid } from '@lukeed/uuid';
import { v4 as secure } from '@lukeed/uuid/secure';
uuid(); //=> '400fa120-5e9f-411e-94bd-2a23f6695704'
uuid(); //=> 'cd6ffb4d-2eda-4c84-aef5-71eb360ac8c5'
secure(); //=> '8641f70e-8112-4168-9d81-d38170bfa612'
secure(); //=> 'd175fabc-2a4d-475f-be56-29ba8104c2f2'
Returns: string
Creates a new Version 4 (random) RFC4122 UUID.
Running on Node.js v12.18.4
Validation:
✔ String.replace(Math.random)
✔ String.replace(crypto)
✔ uuid/v4
✔ @lukeed/uuid
✔ @lukeed/uuid/secure
Benchmark:
String.replace(Math.random) x 381,358 ops/sec ±0.31% (93 runs sampled)
String.replace(crypto) x 15,842 ops/sec ±1.16% (86 runs sampled)
uuid/v4 x 1,259,600 ops/sec ±0.45% (91 runs sampled)
@lukeed/uuid x 6,384,840 ops/sec ±0.22% (95 runs sampled)
@lukeed/uuid/secure x 5,439,096 ops/sec ±0.23% (98 runs sampled)
Running on Chrome v85.0.4183.121
Validation:
✔ String.replace(Math.random)
✔ uuid/v4
✔ @lukeed/uuid
✔ @lukeed/uuid/secure
Benchmark:
String.replace(Math.random) x 313,213 ops/sec ±0.58% (65 runs sampled)
uuid/v4 x 302,914 ops/sec ±0.94% (64 runs sampled)
@lukeed/uuid x 5,881,761 ops/sec ±1.29% (62 runs sampled)
@lukeed/uuid/secure x 852,939 ops/sec ±0.88% (65 runs sampled)
The reason why this UUID.V4 implementation is so much faster is two-fold:
The @lukeed/uuid/secure
module maintains an internal ArrayBuffer of 4096 bytes, which supplies 256 uuid.v4()
invocations. However, the default module preallocates 256 invocations using less memory upfront. Both implementations will regenerate its internal allocation as needed.
A larger buffer would result in higher performance over time, but I found this to be a good balance of performance and memory space.
MIT © Luke Edwards
FAQs
A tiny (230B) and fast UUID (v4) generator for Node and the browser
The npm package @lukeed/uuid receives a total of 919,381 weekly downloads. As such, @lukeed/uuid popularity was classified as popular.
We found that @lukeed/uuid demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.