Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Resolve Dependency on Discontinued Crypto.js Library #31

Open
deepusnath opened this issue May 21, 2024 · 0 comments
Open

Resolve Dependency on Discontinued Crypto.js Library #31

deepusnath opened this issue May 21, 2024 · 0 comments

Comments

@deepusnath
Copy link

I wanted to bring to your attention that Fernet currently has a dependency on the Crypto.js library, which has been discontinued. This poses potential security and maintenance risks for projects relying on Fernet.

Nowadays, Node.js and modern browsers come with a native Crypto module that provides robust and up-to-date cryptographic functionality. Could you please consider updating Fernet to utilize the native Crypto module instead of the discontinued Crypto.js library?

This update would enhance security, ensure ongoing support, and reduce dependency on outdated libraries.

Screenshot 2024-05-21 at 1 21 55 PM
Screenshot 2024-05-21 at 1 21 49 PM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant