npm upgrade
Homeoauth4webapi 2 → 3
2.17.0 → 3.8.8. What the package's exports lost, renamed or changed between the two releases, from lurq's extraction of both published tarballs.
oauth4webapi 3.8.8 removes or renames exports your code may import.
- Removed
- 16
- Renamed
- 0
- Signature changes
- 15
- Types removed
- 0
- Newly deprecated
- 0
- Added
- 50
Does this break your code?
Run this in your project. It compares both releases against the names your code actually imports, locally, with no account and nothing sent to lurq:
npx lurqrun check-upgrade --upgrade oauth4webapi@2.17.0..3.8.8
To have your coding agent check upgrades like this before it writes them, connect lurq to Claude Code, Cursor, VS Code or Codex:
npx lurqrun
Removed
Gone at runtime, with no replacement found under another name. Imports of these fail.
- experimentalCustomFetchobject
- experimentalUseMtlsAliasobject
- experimental_customFetchobject
- experimental_jwksCacheobject
- experimental_useMtlsAliasobject
- experimental_validateDetachedSignatureResponsefunction
- experimental_validateJwtAccessTokenfunction
- isOAuth2Errorfunction
- parseWwwAuthenticateChallengesfunction
- processAuthorizationCodeOAuth2Responsefunction
- processAuthorizationCodeOpenIDResponsefunction
- useMtlsAliasobject
- validateIdTokenSignaturefunction
- validateJwtIntrospectionSignaturefunction
- validateJwtUserInfoSignaturefunction
- validateJwtUserinfoSignaturefunction
Signature changes
Still exported, but the number of arguments it reads changed.
- authorizationCodeGrantRequest6 → 7 arguments
- clientCredentialsGrantRequest4 → 5 arguments
- deviceAuthorizationRequest4 → 5 arguments
- deviceCodeGrantRequest4 → 5 arguments
- genericTokenEndpointRequest5 → 6 arguments
- introspectionRequest4 → 5 arguments
- issueRequestObject4 → 5 arguments
- processClientCredentialsResponse3 → 4 arguments
- processDeviceCodeResponse3 → 4 arguments
- processIntrospectionResponse3 → 4 arguments
- processRefreshTokenResponse3 → 4 arguments
- processUserInfoResponse4 → 5 arguments
- pushedAuthorizationRequest4 → 5 arguments
- refreshTokenGrantRequest4 → 5 arguments
- revocationRequest4 → 5 arguments
An export diff shows what a release removed or re-signatured, not behaviour changes: read the changelog for those. Extracted Oct 14, 2026. oauth4webapi on lurq.