Full refresh into a fully typed ESM module etc

.editorconfig

@@ -0,0 +1,9 @@
+root = true
+
+[*]
+end_of_line = lf
+insert_final_newline = true
+indent_style = space
+indent_size = 2
+charset = utf-8
+trim_trailing_whitespace = true

.github/workflows/dependency-review.yml

@@ -0,0 +1,11 @@
+name: 'Dependency Review'
+
+on: [pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-review:
+    uses: voxpelli/ghatemplates/.github/workflows/dependency-review.yml@main
+

.github/workflows/lint.yml

@@ -0,0 +1,18 @@
+name: Linting
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - '*'
+  pull_request:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  lint:
+    uses: voxpelli/ghatemplates/.github/workflows/lint.yml@main

.github/workflows/nodejs.yml

@@ -0,0 +1,21 @@
+name: Node CI
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - '*'
+  pull_request:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    uses: voxpelli/ghatemplates/.github/workflows/test.yml@main
+    with:
+      node-versions: '20,22,24'
+      os: 'ubuntu-latest'

.gitignore

@@ -0,0 +1,17 @@
+# Basic ones
+/coverage
+/coverage-ts
+/node_modules
+/.env
+/.nyc_output
+/.github/copilot-instructions.md
+
+# We're a library, so please, no lock files
+/package-lock.json
+/yarn.lock
+
+# Generated types
+*.d.ts
+*.d.ts.map
+
+# Library specific ones

.husky/pre-push

@@ -0,0 +1,3 @@
+#!/usr/bin/env sh
+
+npm test

.npmrc

@@ -0,0 +1 @@
+package-lock=false

CHANGELOG.md

@@ -1,5 +1,32 @@
 # CHANGELOG
 
+## Unreleased (v5.0.0)
+
+### Breaking changes
+
+* Dropped support for Node.js versions older than `^20.15.0 || >=22.2.0`
+* Dropped callback support in async API:s, only supporting promises going forward.
+* Converted to ESM with `SecurePassword` as a named export
+* `SecurePassword` now needs to be created with `new`, eg `new SecurePassword()`
+* Constants are their own named exports rather than static properties
+
+### Changes
+
+* Added type declarations
+* Upgraded to `sodium-native` v5.x
+* Dropped `nanoassert`
+
+### Internal changes
+
+* Swapped `tape` for `node:test`
+* Added more tests
+* Mapped the boilerplate setup to that of [voxpelli/node-module-template](https://github.com/voxpelli/node-module-template)
+
+## v4.0.0
+
+* Dropped support for Node.js versions older than 10
+* Upgraded to `sodium-native` v3.x
+
 ## v3.0.0
 
 * `libsodium` has changed the default algorithm from `argon2i` to the safer