Why Math.random() is unsafe for passwords — and how to use crypto.getRandomValue

<p>The <code>uuid</code> npm package is one of the most downloaded libraries in the JavaScript ecosystem. The vast majority of those installs exist for one thing:

<p>Every developer knows the drill: create an account, type a "temporary" password, and promise to change it later. Months go by, and that password — often something painfully

<p>I found this code in <a href="https://github.com/calcom/cal.diy" rel="noopener noreferrer">calcom/cal.diy</a> (~44K GitHub stars), the open-source scheduling platform —