@scure/base

• April 2026 self-audit (all files): no major issues found
  • Audited for spec compliance and security
• Fix all Byte Array types, to ensure proper work in both TypeScript 5.6 & TypeScript 5.9+
  • TS 5.6 has Uint8Array, while TS 5.9+ made it generic Uint8Array<ArrayBuffer>
  • This creates incompatibility of code between versions
  • Previously, it was hard to use and constantly emitted errors similar to TS2345
  • See typescript#62240 for more context
• Fix compilation issues on TypeScript v6
• Improve tree-shaking, reduce bundle sizes
• utf8: make decoder strict, use isWellFormed (polyfilled in some envs)
• Add strict ascii decoder (char range 0..127)
• Bech32 examples in the docs by @davay42 in #44
• Add overload to Bech32.decode to handle arbitrary string input by @webmaster128 in #45
• perf: trust Uint8Array.fromBase64 to check non-whitespace chars by @ChALkeR in #47

New Contributors

• @davay42 made their first contribution in #44
• @webmaster128 made their first contribution in #45
• @ChALkeR made their first contribution in #47

(We're skipping v2.1, to align with other noble / scure packages)

Full Changelog: 2.0.0...2.2.0

• The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+
  • Node v20.19 is now the minimum required version
  • Package imports now work correctly in bundler-less environments, such as browsers
  • Reduces npm package size (traffic consumed): 26.1KB => 24.5KB
  • Reduces unpacked npm size (on-disk space): 165KB => 102KB
• Make bundle sizes smaller, compared to v1.x
• Upgrade typescript compilation env to ts5.9 and es2022

Full Changelog: 1.2.6...2.0.0

• base64: prohibit spaces when native mode is selected.

Full Changelog: 1.2.5...1.2.6

• base64: use native coding when available. 167x faster encoding on 1KB inputs
• hex: use native coding when available. 216x faster encoding on 1KB inputs.
• Standalone build files are now attested and can be verified, check out README

Full Changelog: 1.2.4...1.2.5

Fix broken common.js version

Full Changelog: 1.2.3...1.2.4

• Fix unpublished common.js version

Full Changelog: 1.2.2...1.2.3

• Publish to JSR.io
• Use typescript isolatedDeclarations and "safe types" for automatically generated documentation
• Use typescript verbatimModuleSyntax to support native type stripping

Full Changelog: 1.2.1...1.2.2

• Bring back NO_SIDE_EFFECTS directive for tree-shaking.
• Optimize performance

Full Changelog: 1.2.0...1.2.1

Improve encoding and decoding speed up to 4x. Decoding speed benchmarks:

• 32B hex: 240,442 => 1,046,025 ops per second
• 8KB hex: 1,026 => 4,096
• 32B base64: 346,981 => 1,148,105
• 8KB base64: 1,482 => 5,394

Reduce minified size. Speed-up bytes testing.

Full Changelog: https://github.com/paulmillr/scure-base/compare/1.1.9...1.2.0

• Add Bech32.encodeFromBytes
• Fix typeof Bech32.encode

Full Changelog: https://github.com/paulmillr/scure-base/compare/1.1.8...1.1.9

What's Changed

• Add Bech32 interface. Use explicit types for jsr
• Improve esm / typescript compatibility

New Contributors

• @Sjlver made their first contribution in https://github.com/paulmillr/scure-base/pull/35

Full Changelog: https://github.com/paulmillr/scure-base/compare/1.1.7...1.1.8

What's Changed

• Add base32nopad and base32hexnopad by @benjreinhart in https://github.com/paulmillr/scure-base/pull/34
• Remove wrong pure annotation for rollup. Closes gh-31
• pkg.json: add source maps. Closes gh-32

New Contributors

• @benjreinhart made their first contribution in https://github.com/paulmillr/scure-base/pull/34

Full Changelog: https://github.com/paulmillr/scure-base/compare/1.1.6...1.1.7

• Refactor bech32 a bit https://github.com/paulmillr/scure-base/pull/27
• fix: bech32 prefix length by @mahnunchik in https://github.com/paulmillr/scure-base/pull/28
• Add base64nopad by @FiloSottile in https://github.com/paulmillr/scure-base/pull/29

New Contributors

• @FiloSottile made their first contribution in https://github.com/paulmillr/scure-base/pull/29

Full Changelog: https://github.com/paulmillr/scure-base/compare/1.1.5...1.1.6

utils: export convertRadix and convertRadix2

Full Changelog: https://github.com/paulmillr/scure-base/compare/1.1.4...1.1.5

• fix: error messages (strings => numbers) by @mahnunchik in https://github.com/paulmillr/scure-base/pull/23
• refine: branchless chain by @imcotton in https://github.com/paulmillr/scure-base/pull/26
• Improve Uint8Array type check reliability in bad, jsdom-like environments

New Contributors

• @mahnunchik made their first contribution in https://github.com/paulmillr/scure-base/pull/23
• @imcotton made their first contribution in https://github.com/paulmillr/scure-base/pull/26

Full Changelog: https://github.com/paulmillr/scure-base/compare/1.1.3...1.1.4

• bech32: fix type issue introduced by gh-15

Full Changelog: https://github.com/paulmillr/scure-base/compare/1.1.2...1.1.3

• Add base64urlnopad
• Improve tree-shaking, reduce package size by utilizing pure functions and sideEffects: false
• Add TS types field to exports map by @jacogr in https://github.com/paulmillr/scure-base/pull/9
• bech32: use template literal typescript type by @alexgleason in https://github.com/paulmillr/scure-base/pull/15
• Add deno mod.ts
• docs(readme): add example usage by @sambacha in https://github.com/paulmillr/scure-base/pull/19

New Contributors

• @jacogr made their first contribution in https://github.com/paulmillr/scure-base/pull/9
• @alexgleason made their first contribution in https://github.com/paulmillr/scure-base/pull/15
• @sambacha made their first contribution in https://github.com/paulmillr/scure-base/pull/19

Full Changelog: https://github.com/paulmillr/scure-base/compare/1.1.1...1.1.2

Fix ESM support

• Improve ESM support
• Remove viral esModuleInterop option from typescript compiling

First stable post-audit release