* The base64url package has issues with TypeScript and also has an open vulnerability reported on HackerOne (not affected). Most replacement packages are only compatible with Node 4+ so inlining an implementation in order to release with a patch version