It should be bytes, I might have left in character length in the uid.js module.

I figured code was more temporary, but it's easy enough to bump to 32.