npm · #4749 most downloaded on npm

@scure/bip32

2.4.0paulmillr/scure-bip32 ↗New releases in your daily digest, changelog included.

Secure, audited & minimal implementation of BIP32 hierarchical deterministic (HD) wallets over secp256k1

Last release 1 months ago
28 Aug 2026
Release timing varies
gaps range from 8 days to 7 months
Nearly every release is documented
notes for 23 of 23 stable releases
Nothing withdrawn
no release was ever pulled
5 years old
25 releases · first in 2022

Release timeline

25 releases since 2022

20222023202420252026

20222026

One column per quarter.

Releases

2.4.028 Aug 20262 sources agree
The privateKey , publicKey , chainCode , identifier , pubKeyHash now return copies instead of live buffers
Hardening:

The privateKey, publicKey, chainCode, identifier, pubKeyHash now return copies instead of live buffers

deriveChild no longer blindly try-catches. Use proper filtered-by-kind error handling. Retries will stop at last
valid index instead of overflowing with error

fromExtendedKey now rejects checksum-valid payloads that are not exactly 78 bytes

Stricter HDKey constructor validation: depth must be an integer in 0..255 (throws RangeError), index and parentFingerprint must be valid uint32 values, and chainCode must be exactly 32 bytes

derive(path) now rejects paths up front that would exceed the maximum serializable depth of 255

Added toPrivateJSON() for explicit private (xpriv + xpub) export; toJSON() currently still includes xpriv for backwards compatibility (planned to become public-only in v3, so migrate to toPrivateJSON() for private round-trips)

fromJSON now also accepts { xpub } to restore a public-only key

Upgrade deps: noble-hashes, noble-curves and scure-base to 2.4.0.

Full Changelog: 2.3.0...2.4.0
Open source →

Improve validation and error messages.

Improve validation and error messages.
Upgrade deps: noble-hashes, noble-curves and scure-base to 2.3.0.
Reduce on-disk package size: 47.5kb → 35.7kb (-11.8kb), by disabling source maps (they became less relevant).
Reduce npm package size: 13.3kb → 8.63kb (-4.68kb)

Full Changelog: 2.2.0...2.3.0

Open source →

2.2.021 Apr 20262 sources agree

April 2026 self-audit (all files): no major issues found

April 2026 self-audit (all files): no major issues found
- Audited for spec compliance and security
Fix all Byte Array types, to ensure proper work in both TypeScript 5.6 & TypeScript 5.9+
- TS 5.6 has Uint8Array, while TS 5.9+ made it generic Uint8Array<ArrayBuffer>
- This creates incompatibility of code between versions
- Previously, it was hard to use and constantly emitted errors similar to TS2345
- See typescript#62240 for more context
Fix compilation issues on TypeScript v6
Upgrade dependencies to self-audited 2.2.0

(We're skipping v2.1, to align with other noble / scure packages)

Full Changelog: 2.0.1...2.2.0

Open source →

2.0.17 Oct 20252 sources agree

Upgrade noble-hashes to v2.0.1 and noble-curves to v2.0.1

Upgrade noble-hashes to v2.0.1 and noble-curves to v2.0.1
Upgrade noble-hashes to 2.0.1
Upgrade noble-curves to 2.0.1

Full Changelog: 2.0.0...2.0.1

Open source →

2.0.025 Aug 20252 sources agree

The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+

The package is now ESM-only. ESM can finally be loaded from common.js on node v20.19+
- Node v20.19 is now the minimum required version
- Package imports now work correctly in bundler-less environments, such as browsers
- Reduces npm package size (traffic consumed): 15KB => 11.7KB
- Reduces unpacked npm size (on-disk space): 67KB => 43KB
Make bundle sizes smaller, compared to v1.x
Upgrade to noble-hashes, noble-curves & scure-base v2
Prohibit HD key depths over 255 to match spec
Upgrade typescript compilation env to ts5.9 and es2022

Full Changelog: 1.7.0...2.0.0

Open source →

2.0.0-beta.117 Aug 2025pre-release

Nothing published for this version

1.7.024 Apr 20252 sources agree

Bump hashes to v1.8.0 , curves to v1.9.0 , base to v1.2.5

Bump hashes to v1.8.0, curves to v1.9.0, base to v1.2.5
Standalone build files are now attested, check out README for verification instructions

Full Changelog: 1.6.2...1.7.0

Open source →

1.6.218 Jan 20252 sources agree

Use typescript verbatimModuleSyntax to support future node.js type stripping

Use typescript verbatimModuleSyntax to support future node.js type stripping
Improve docs

Full Changelog: 1.6.1...1.6.2

Open source →

1.6.13 Jan 20252 sources agree

Bump noble-curves to 1.8.0 and noble-hashes to 1.7.0

Bump noble-curves to 1.8.0 and noble-hashes to 1.7.0
Use typescript isolatedDeclarations to improve docs
Publish to JSR

Full Changelog: 1.6.0...1.6.1

Open source →

1.6.023 Nov 20242 sources agree

Bump hashes to v1.6.0 , curves to v1.7.0 , base to 1.2.0

Bump hashes to v1.6.0, curves to v1.7.0, base to 1.2.0
Improve type checks for bigints

Full Changelog: 1.5.0...1.6.0

Open source →

1.5.03 Sept 20242 sources agree

Improve typescript compatibility by emitting separate types for cjs / esm

Bump noble-curves to v1.6.0
Bump noble-hashes to v1.5.0
Improve typescript compatibility by emitting separate types for cjs / esm

Full Changelog: 1.4.0...1.5.0

Open source →

1.4.020 Mar 20242 sources agree

Fix HDKeyOpt type by @arobsn in https://github.com/paulmillr/scure-bip32/pull/14

Fix HDKeyOpt type by @arobsn in https://github.com/paulmillr/scure-bip32/pull/14

Update deps
- noble-curves to 1.4.0: https://github.com/paulmillr/noble-curves/releases/tag/1.4.0
- noble-hashes to 1.4.0: https://github.com/paulmillr/noble-hashes/releases/tag/1.4.0
- scure-base to 1.1.6: https://github.com/paulmillr/scure-base/releases/tag/1.1.6

Full Changelog: https://github.com/paulmillr/scure-bip32/compare/1.3.3...1.4.0

Open source →

1.3.312 Dec 20232 sources agree

noble-curves to 1.3.0: https://github.com/paulmillr/noble-curves/releases/tag/1.3.0

Update deps
- noble-curves to 1.3.0: https://github.com/paulmillr/noble-curves/releases/tag/1.3.0
- noble-hashes to 1.3.3: https://github.com/paulmillr/noble-hashes/releases/tag/1.3.3
- scure-base to 1.1.4: https://github.com/paulmillr/scure-base/releases/tag/1.1.4

Full Changelog: https://github.com/paulmillr/scure-bip32/compare/1.3.2...1.3.3

Open source →

1.3.225 Aug 20232 sources agree

Improve tree-shaking, decrease bundle size

Improve tree-shaking, decrease bundle size
Update deps
- noble-curves from 1.1.0 to 1.2.0: https://github.com/paulmillr/noble-curves/releases/tag/1.2.0
- noble-hashes from 1.3.1 to 1.3.2: https://github.com/paulmillr/noble-hashes/releases/tag/1.3.2
- scure-base from 1.1.0 to 1.1.2: https://github.com/paulmillr/scure-base/releases/tag/1.1.2

Full Changelog: https://github.com/paulmillr/scure-bip32/compare/1.3.1...1.3.2

Open source →

1.3.110 Jul 20232 sources agree

Update noble-curves from 1.0.0 to 1.1.0: https://github.com/paulmillr/noble-curves/releases/tag/1.1.0

Update noble-curves from 1.0.0 to 1.1.0: https://github.com/paulmillr/noble-curves/releases/tag/1.1.0
Update noble-hashes from 1.3.0 to 1.3.1: https://github.com/paulmillr/noble-hashes/releases/tag/1.3.1

Full Changelog: https://github.com/paulmillr/scure-bip32/compare/1.3.0...1.3.1

Open source →

1.3.012 Apr 2023

Use stable noble-curves. Full Changelog: https://github.com/paulmillr/scure-bip32/compare/1.2.0...1.3.0

Use stable noble-curves.

Full Changelog: https://github.com/paulmillr/scure-bip32/compare/1.2.0...1.3.0

Open source →

Additional notes

Use stable noble-curves.

Open source →

1.2.016 Mar 2023

Switch from noble-secp256k1 to noble-curves.

Full Changelog: https://github.com/paulmillr/scure-bip32/compare/1.1.5...1.2.0

Open source →

Additional notes

Switch from noble-secp256k1 to noble-curves.

Open source →

1.1.52 Feb 2023

Added source maps Full Changelog: https://github.com/paulmillr/scure-bip32/compare/1.1.4...1.1.5

Added source maps

Full Changelog: https://github.com/paulmillr/scure-bip32/compare/1.1.4...1.1.5

Open source →

Additional notes

Added source maps

Open source →

1.1.42 Feb 2023

Update dependencies Full Changelog: https://github.com/paulmillr/scure-bip32/compare/1.1.3...1.1.4

Update dependencies

Full Changelog: https://github.com/paulmillr/scure-bip32/compare/1.1.3...1.1.4

Open source →

Additional notes

Update dependencies

Open source →

1.1.39 Jan 20232 sources agree

Improves compatibility with new version of noble/secp256k1

Improves compatibility with new version of noble/secp256k1

Full Changelog: https://github.com/paulmillr/scure-bip32/compare/1.1.2...1.1.3

Open source →

1.1.29 Jan 20232 sources agree

Improves compatibility with new version of noble/secp256k1

Improves compatibility with new version of noble/secp256k1
This release was not built correctly, bump straight to 1.1.3

Full Changelog: https://github.com/paulmillr/scure-bip32/compare/1.1.1...1.1.2

Open source →

1.1.130 Sept 2022

Improve type check in fromMasterSeed()

Improve type check in fromMasterSeed()
Bump dependencies

Full Changelog: https://github.com/paulmillr/scure-bip32/compare/1.1.0...1.1.1

Open source →

Additional notes

Improve type check in fromMasterSeed()
Bump dependencies

Open source →

1.1.011 Jun 20222 sources agree

Remove viral esModuleInterop option from typescript compiling

Improve ESM support
Update dependencies
Remove viral esModuleInterop option from typescript compiling

Open source →

1.0.126 Jan 20222 sources agree

First post-audit stable release

Open source →

1.0.0-rc117 Jan 2022pre-release

Nothing published for this version

Your coding agent can read these notes before it upgrades. Set up the MCP server →