uuid

cargo

A library to generate and parse UUIDs.

Audits

PE Patrick Elsen 2026-06-02

uuid@1.23.2 · 1 finding

uuid 1.23.2 generates, parses, and formats RFC 9562 UUIDs (v1-v8) with optional serde/borsh/bytemuck/zerocopy/slog/arbitrary integrations; #![no_std] by default. Source matches upstream byte-for-byte. Nine unsafe blocks — ASCII-only from_utf8_unchecked and the NonNilUuid niche — each documented and sound. MD5/SHA-1 via md-5/sha1_smol for v3/v5; entropy via getrandom/rand/WebCrypto. One low-severity finding: a redundant unsafe block in the error path.

concurrency-documentedconcurrency-safecrypto-safehas-binarieshas-build-exechas-fuzz-testshas-install-exechas-integration-testshas-property-testshas-unit-testsimpl-algorithmimpl-concurrencyimpl-cryptoimpl-datastructureimpl-interpreterimpl-jitimpl-parserimpl-protocolis-benignparser-impl-correctparser-impl-safeparser-impl-testedunsafe-documentedunsafe-minimalunsafe-safeunsafe-testeduses-concurrencyuses-cryptouses-environmentuses-execuses-filesystemuses-interpreteruses-jituses-networkuses-unsafe

PE Patrick Elsen 2026-05-27

uuid@1.23.1 · 2 findings

RFC 9562 UUID library (v1/v3/v4/v5/v6/v7/v8, nil, max) with parsers for simple/hyphenated/URN/braced forms. Unsafe is small and load-bearing (transmutes between repr(transparent) wrappers and from_utf8_unchecked on known-ASCII buffers); crypto is delegated to md-5/sha1_smol for the deterministic v3/v5 generators. Two low-severity quality findings (a typo and an operator-precedence-dependent mask); safe to deploy.