# What changed in basic-auth

> 7 changes in basic-auth 3 from its official release notes, upgrade guides and advisories: 4 breaking, 1 new APIs and options. Each one cited. Sources checked 2026-10-18. HTML: https://unstale.sh/npm/basic-auth/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## basic-auth 3

### Breaking changes

- Removes the default export; use parse(str) instead. (3.0.0) — [release notes](https://github.com/jshttp/basic-auth/releases/tag/v3.0.0)
- The package is published as ESM, changing the module format developers use when consuming it. (3.0.0) — [release notes](https://github.com/jshttp/basic-auth/releases/tag/v3.0.0)
- The supported Node.js versions are now >=22. (3.0.0) — [release notes](https://github.com/jshttp/basic-auth/releases/tag/v3.0.0)
- The parse method now expects a string. (3.0.0) — [release notes](https://github.com/jshttp/basic-auth/releases/tag/v3.0.0)

### New APIs and options

- Adds a format method that accepts name and pass. (3.0.0) — [release notes](https://github.com/jshttp/basic-auth/releases/tag/v3.0.0)

### Performance

- Parse performance improved by approximately 15%. (3.0.0) — [release notes](https://github.com/jshttp/basic-auth/releases/tag/v3.0.0)

### Fixes and other changes

- Adds cross-platform base64 support. (3.0.0) — [release notes](https://github.com/jshttp/basic-auth/releases/tag/v3.0.0)