
Security News
The Nightmare Before Deployment
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.
uuid7-standard
Advanced tools
UUIDv7 with the final standard. Not to be confused with the uuid7 package on pypi, based on a draft version that was very different.
A simple module for generating UUIDv7 that contain creation timestamps. Another function for extracting the time of an UUID.
Note: As of writing, Python has no UUIDv7 support. There's an abandoned package uuid7 that uses a draft RFC with incorrect timestamps (some two centuries off). These modules conflict, uninstall the other one.
datetime and UUID facilities rather than milliseconds or bare strings.pip install uuid7-standard
Or for your project using uv:
uv add uuid7-standard
import uuid7
# Create a random UUIDv7 with current timestamp
u = uuid7.create()
print(str(u), u.bytes)
# Create with specific timestamp
from datetime import datetime, UTC
when = datetime(1970, 1, 1, tzinfo=UTC)
u = uuid7.create(when)
# Extract timestamp
from uuid import UUID
u = UUID('00000000-0000-7dac-b3e3-ecb571bb3e2f')
timestamp = uuid7.time(u) # 1970-01-01 UTC
create(when: datetime?) -> UUIDCreate a UUIDv7 with timestamp-based ordering.
The current time is used, unless when is passed as datetime (local time or timezone-aware) This is useful e.g. for creating a bunch of UUIDv7 with precisely the same timestamp.
time(u: UUID|str) -> datetimeExtract the timestamp from a UUIDv7. Raises ValueError if the UUID is not a UUIDv7.
FAQs
UUIDv7 with the final standard. Not to be confused with the uuid7 package on pypi, based on a draft version that was very different.
We found that uuid7-standard demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.

Research
/Security News
Impostor NuGet package Tracer.Fody.NLog typosquats Tracer.Fody and its author, using homoglyph tricks, and exfiltrates Stratis wallet JSON/passwords to a Russian IP address.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.