diff --git a/package-lock.json b/package-lock.json
index c6046bf..cd80fce 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,16 +1,16 @@
 {
   "name": "authcore-ts",
-  "version": "1.0.0",
+  "version": "0.1.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "authcore-ts",
-      "version": "1.0.0",
-      "license": "ISC",
+      "version": "0.1.0",
+      "license": "MIT",
       "dependencies": {
         "bcryptjs": "^3.0.3",
-        "jose": "^6.2.13"
+        "jose": "^6.2.15"
       },
       "devDependencies": {
         "@arethetypeswrong/cli": "^0.18.5",
@@ -25,6 +25,9 @@
         "typescript": "^5.9.3",
         "typescript-eslint": "^8.72.0",
         "vitest": "^2.1.9"
+      },
+      "engines": {
+        "node": ">=20"
       }
     },
     "node_modules/@ampproject/remapping": {
@@ -2936,9 +2939,9 @@
       }
     },
     "node_modules/jose": {
-      "version": "6.2.13",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.13.tgz",
-      "integrity": "sha512-7TIg10ZE1x82YediN+lcrPNvGMKge9yFHQD+Qho/b8y2adfugU3AsvvHfxV0fzyFllT6l9xCjf4RWY9g/Z9PJQ==",
+      "version": "6.2.15",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.15.tgz",
+      "integrity": "sha512-qdF6ewcZARtef63fJ9AKKZPgxw+t7USH6HLXYcD4CrdmSvDp79rpJSPFEKc90QBeGS63u1KQtN2MZQHC0yDIzA==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/panva"
diff --git a/package.json b/package.json
index 9fb478b..845bd44 100644
--- a/package.json
+++ b/package.json
@@ -31,7 +31,7 @@
   "description": "Framework-agnostic TypeScript auth core: bcrypt password hashing, revocable signed sessions, typed RBAC, rate limiting and single-use reset tokens. Extracted from AssetOps.",
   "dependencies": {
     "bcryptjs": "^3.0.3",
-    "jose": "^6.2.13"
+    "jose": "^6.2.15"
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "^0.18.5",