npm / bitcoin-address-validation
bitcoin-address-validation
What changed in bitcoin-address-validation 3 to 4, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-19.
3 breaking1 security
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initbitcoin-address-validation 43 changes
Breaking changes 3
Valid witness addresses with an unrecognized type now return AddressType.unknown; exhaustive switches and mappings must handle it, and applications requiring a recognized payment type should check type as well as validate.
Casting destinations are checked at runtime and must be regtest or signet.
Node.js users now require Node.js 18.8 or newer.
bitcoin-address-validation 31 changes
Security 1
Address inputs longer than 500 characters are rejected before decoding to prevent excessive CPU usage.