# @levischuck/tiny-cbor

> Tiny CBOR library

Latest version **0.3.6** (published 2026-06-18) · MIT license · 0 weekly downloads

## Install

```sh
npm install @levischuck/tiny-cbor
pnpm add @levischuck/tiny-cbor
yarn add @levischuck/tiny-cbor
bun add @levischuck/tiny-cbor
```

## Health

**Score 60/100 (C)** — status: active.

Positive: has types; esm support; no vulnerabilities; has provenance.

Warnings: low downloads; pre 1.0.

## Facts

| | |
|---|---|
| Version | 0.3.6 |
| Published | 2026-06-18 |
| First published | 2023-07-23 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | bundled |
| Module format | ESM + CommonJS |
| Dependencies | 0 |
| Unpacked size | 56.3 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| Provenance | attested (GitHub Actions) |
| GitHub stars | 8 |
| Maintainers | levischuck |

## Links

- npm: https://www.npmjs.com/package/@levischuck/tiny-cbor
- Repository: https://github.com/LeviSchuck/tiny-cbor
- Homepage: https://github.com/LeviSchuck/tiny-cbor#readme
- Issues: https://github.com/LeviSchuck/tiny-cbor/issues
- npm.io page: https://npm.io/package/@levischuck/tiny-cbor

## Recent versions

- 0.3.6 (latest) — 2026-06-18
- 0.3.5 — 2026-06-18
- 0.3.4 — 2026-05-06
- 0.3.3 — 2026-04-14
- 0.3.2 — 2025-09-23
- 0.3.1 — 2025-05-21
- 0.2.11 — 2025-02-08
- 0.2.10 — 2025-02-08
- 0.2.9 — 2025-02-08
- 0.2.8 — 2025-02-05
- 0.2.2 — 2023-09-06
- 0.2.1 — 2023-07-29
- 0.1.0 — 2023-07-24
- 0.0.5 — 2023-07-23
- 0.0.4 — 2023-07-23
- … 1 more at https://npm.io/package/@levischuck/tiny-cbor/versions

## README

# Tiny CBOR

[![](https://img.shields.io/github/actions/workflow/status/levischuck/tiny-cbor/build.yaml?branch=main&style=flat-square)](https://github.com/LeviSchuck/tiny-cbor/actions)
[![](https://img.shields.io/codecov/c/gh/levischuck/tiny-cbor?style=flat-square)](https://codecov.io/gh/levischuck/tiny-cbor)
[![](https://img.shields.io/github/v/tag/levischuck/tiny-cbor?label=npm&logo=npm&style=flat-square)](https://www.npmjs.com/package/@levischuck/tiny-cbor)
[![](https://img.shields.io/jsr/v/%40levischuck/tiny-cbor?style=flat-square&logo=jsr&label=JSR)](https://jsr.io/@levischuck/tiny-cbor)
[![](https://img.shields.io/github/license/levischuck/tiny-cbor?style=flat-square)](https://github.com/LeviSchuck/tiny-cbor/blob/main/LICENSE.txt)
![](https://img.shields.io/bundlephobia/min/%40levischuck/tiny-cbor?style=flat-square)

This minimal generic library decodes and encodes most useful CBOR structures
into simple JavaScript structures:

- Maps with keys as `string`s or `number`s with `CBORType` values as a `Map`
- Arrays of `CBORType` values
- integers as `number`s
- float32 and float64 as `number`s
- float16 `NaN`, `Infinity`, `-Infinity`
- `string`s
- byte strings as `Uint8Array`
- booleans
- `null` and `undefined`
- tags as `CBORTag(tag, value)`

## Limitations

This implementation does not support:

- indefinite length maps, arrays, text strings, or byte strings.
- half precision floating point numbers
- integers outside the range of `[-9007199254740991, 9007199254740991]`, see
  [Number.MAX_SAFE_INTEGER](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Number/MAX_SAFE_INTEGER)
- native output to JSON
- does not support generic objects, only `Map`s

This implementation has the following constraints:

- Map keys may only be strings or numbers
- Tags are not interpreted

## Behavior

Maps that have duplicate keys will throw an error during decoding. Decoding data
that is incomplete will throw an error during decoding.

## Example

CBOR byte decoding example, this outputs a CBORType which is up to you to ensure
matches the right underlying type (e.g. a string) at runtime.

```typescript
// NPM
// import { decodeCBOR } from "@levischuck/tiny-cbor";
// or JSR
// import { decodeCBOR } from "jsr:@levischuck/tiny-cbor";
import { decodeCBOR } from "./index.ts";
// Get your bytes somehow, directly or with decodeBase64 / decodeHex (available through @levischuck/tiny-encodings)
// encoded ["hello", "world", 1]
const HELLO_WORLD_BYTES = new Uint8Array([
  0x83, // Array (3)
  0x65, // text (5),
  0x68, // h
  0x65, // e
  0x6C, // l
  0x6C, // l
  0x6F, // o
  0x65, // text(5),
  0x77, // w
  0x6F, // o
  0x72, // r
  0x6C, // l
  0x64, // d
  0x01, // 1
]);
const decoded = decodeCBOR(HELLO_WORLD_BYTES);
if (
  Array.isArray(decoded) && decoded.length == 3 && decoded[0] == "hello" &&
  decoded[1] == "world" && decoded[2] == 1
) {
  console.log("Success!");
}
```

If you're looking to make this more ergonomic in JS / TS, check out
[tiny-cbor-schema](https://github.com/levischuck/tiny-cbor-schema)!

## Where to get it

This library is available on
[NPM](https://www.npmjs.com/package/@levischuck/tiny-cbor) and
[JSR](https://jsr.io/@levischuck/tiny-cbor).

This library is no longer automatically published to Deno's Third Party Modules.
Newer versions may appear on deno.land/x, but do not work.

---
_Source: https://npm.io/package/@levischuck/tiny-cbor · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._