npm / @owf/token-status-list
@owf/token-status-list
What changed in @owf/token-status-list 0.4 to 0.5, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-21.
2 breaking1 security1 new APIs and options
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli init@owf/token-status-list 0.52 changes
Breaking changes 1
The CommonJS build is no longer published; the package is ESM-only, avoiding dual-package hazards in single-module-system runtimes.
Security 1
JWT and CWT verification now reject tokens when the current time is exactly exp plus the skew, consistent with the requirement to reject tokens on or after exp.
@owf/token-status-list 0.42 changes
Breaking changes 1
The constructor, setStatus and encoder now accept only integer status values from 0 to 2 ** bitsPerStatus - 1; invalid values throw an SLException instead of being encoded into neighbouring entries.
New APIs and options 1
Adds a function to verify the Status List Token JWT header; verifyStatus now calls it before checking claims.