diff --git a/bun.lock b/bun.lock
index 00cc0dd..9339c78 100644
--- a/bun.lock
+++ b/bun.lock
@@ -11,7 +11,7 @@
         "@ipld/dag-cbor": "^9.2.0",
         "@noble/curves": "^1.8.0",
         "@noble/hashes": "^1.7.0",
-        "@scure/bip39": "2.0.1",
+        "@scure/bip39": "1.6.0",
         "bs58": "^6.0.0",
         "commander": "^13.0.0",
         "env-paths": "4.0.0",
@@ -104,9 +104,9 @@
 
     "@noble/hashes": ["@noble/hashes@1.8.0", "", {}, "sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A=="],
 
-    "@scure/base": ["@scure/base@2.0.0", "", {}, "sha512-3E1kpuZginKkek01ovG8krQ0Z44E3DHPjc5S2rjJw9lZn3KSQOs8S7wqikF/AH7iRanHypj85uGyxk0XAyC37w=="],
+    "@scure/base": ["@scure/base@1.2.6", "", {}, "sha512-g/nm5FgUa//MCj1gV09zTJTaM6KBAHqLN907YVQqf7zC49+DcO4B1so4ZX07Ef10Twr6nuqYEH9GEggFXA4Fmg=="],
 
-    "@scure/bip39": ["@scure/bip39@2.0.1", "", { "dependencies": { "@noble/hashes": "2.0.1", "@scure/base": "2.0.0" } }, "sha512-PsxdFj/d2AcJcZDX1FXN3dDgitDDTmwf78rKZq1a6c1P1Nan1X/Sxc7667zU3U+AN60g7SxxP0YCVw2H/hBycg=="],
+    "@scure/bip39": ["@scure/bip39@1.6.0", "", { "dependencies": { "@noble/hashes": "~1.8.0", "@scure/base": "~1.2.5" } }, "sha512-+lF0BbLiJNwVlev4eKelw1WWLaiKXw7sSl8T6FvBlWkdX+94aGJ4o8XjUdlyhTCjd8c+B3KT3JfS8P0bLRNU6A=="],
 
     "abort-controller": ["abort-controller@3.0.0", "", { "dependencies": { "event-target-shim": "^5.0.0" } }, "sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg=="],
 
@@ -278,8 +278,6 @@
 
     "@jsonjoy.com/util/@jsonjoy.com/buffers": ["@jsonjoy.com/buffers@1.2.1", "", { "peerDependencies": { "tslib": "2" } }, "sha512-12cdlDwX4RUM3QxmUbVJWqZ/mrK6dFQH4Zxq6+r1YXKXYBNgZXndx2qbCJwh3+WWkCSn67IjnlG3XYTvmvYtgA=="],
 
-    "@scure/bip39/@noble/hashes": ["@noble/hashes@2.0.1", "", {}, "sha512-XlOlEbQcE9fmuXxrVTXCTlG2nlRXa9Rj3rr5Ue/+tX+nmkgbX720YHh0VR3hBF9xDvwnb8D2shVGOwNx+ulArw=="],
-
     "@jsonjoy.com/fs-snapshot/@jsonjoy.com/json-pack/@jsonjoy.com/base64": ["@jsonjoy.com/base64@17.67.0", "", { "peerDependencies": { "tslib": "2" } }, "sha512-5SEsJGsm15aP8TQGkDfJvz9axgPwAEm98S5DxOuYe8e1EbfajcDmgeXXzccEjh+mLnjqEKrkBdjHWS5vFNwDdw=="],
 
     "@jsonjoy.com/fs-snapshot/@jsonjoy.com/json-pack/@jsonjoy.com/codegen": ["@jsonjoy.com/codegen@17.67.0", "", { "peerDependencies": { "tslib": "2" } }, "sha512-idnkUplROpdBOV0HMcwhsCUS5TRUi9poagdGs70A6S4ux9+/aPuKbh8+UYRTLYQHtXvAdNfQWXDqZEx5k4Dj2Q=="],
diff --git a/package-lock.json b/package-lock.json
index 073dc2d..ea64a10 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,13 @@
 {
   "name": "vit",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "vit",
-      "version": "0.6.0",
+      "version": "0.6.1",
+      "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
         "@atproto/api": "^0.18.20",
@@ -15,7 +16,7 @@
         "@ipld/dag-cbor": "^9.2.0",
         "@noble/curves": "^1.8.0",
         "@noble/hashes": "^1.7.0",
-        "@scure/bip39": "2.0.1",
+        "@scure/bip39": "1.6.0",
         "bs58": "^6.0.0",
         "commander": "^13.0.0",
         "env-paths": "4.0.0",
@@ -29,7 +30,7 @@
         "marked": "^17.0.4"
       },
       "engines": {
-        "node": ">=20.0.0"
+        "node": ">=20.10.0"
       }
     },
     "node_modules/@atproto-labs/did-resolver": {
@@ -693,28 +694,22 @@
       }
     },
     "node_modules/@scure/base": {
-      "version": "2.0.0",
+      "version": "1.2.6",
+      "resolved": "https://registry.npmjs.org/@scure/base/-/base-1.2.6.tgz",
+      "integrity": "sha512-g/nm5FgUa//MCj1gV09zTJTaM6KBAHqLN907YVQqf7zC49+DcO4B1so4ZX07Ef10Twr6nuqYEH9GEggFXA4Fmg==",
       "license": "MIT",
       "funding": {
         "url": "https://paulmillr.com/funding/"
       }
     },
     "node_modules/@scure/bip39": {
-      "version": "2.0.1",
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/@scure/bip39/-/bip39-1.6.0.tgz",
+      "integrity": "sha512-+lF0BbLiJNwVlev4eKelw1WWLaiKXw7sSl8T6FvBlWkdX+94aGJ4o8XjUdlyhTCjd8c+B3KT3JfS8P0bLRNU6A==",
       "license": "MIT",
       "dependencies": {
-        "@noble/hashes": "2.0.1",
-        "@scure/base": "2.0.0"
-      },
-      "funding": {
-        "url": "https://paulmillr.com/funding/"
-      }
-    },
-    "node_modules/@scure/bip39/node_modules/@noble/hashes": {
-      "version": "2.0.1",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 20.19.0"
+        "@noble/hashes": "~1.8.0",
+        "@scure/base": "~1.2.5"
       },
       "funding": {
         "url": "https://paulmillr.com/funding/"
diff --git a/package.json b/package.json
index 6cb920f..f0f022d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "vit",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Social toolkit for personalized software",
   "license": "MIT",
   "bin": {
@@ -28,7 +28,7 @@
     "@ipld/dag-cbor": "^9.2.0",
     "@noble/curves": "^1.8.0",
     "@noble/hashes": "^1.7.0",
-    "@scure/bip39": "2.0.1",
+    "@scure/bip39": "1.6.0",
     "bs58": "^6.0.0",
     "commander": "^13.0.0",
     "env-paths": "4.0.0",
diff --git a/src/lib/cap-ref.js b/src/lib/cap-ref.js
index 392956d..9b96104 100644
--- a/src/lib/cap-ref.js
+++ b/src/lib/cap-ref.js
@@ -2,7 +2,7 @@
 // Copyright (c) 2026 sol pbc
 
 import { sha256 } from '@noble/hashes/sha256';
-import { wordlist } from '@scure/bip39/wordlists/english.js';
+import { wordlist } from '@scure/bip39/wordlists/english';
 
 export const REF_PATTERN = /^[a-z]+-[a-z]+-[a-z]+$/;