Skip to content

Resolve Dependency on Discontinued Crypto.js Library #31

@deepusnath

Description

@deepusnath

I wanted to bring to your attention that Fernet currently has a dependency on the Crypto.js library, which has been discontinued. This poses potential security and maintenance risks for projects relying on Fernet.

Nowadays, Node.js and modern browsers come with a native Crypto module that provides robust and up-to-date cryptographic functionality. Could you please consider updating Fernet to utilize the native Crypto module instead of the discontinued Crypto.js library?

This update would enhance security, ensure ongoing support, and reduce dependency on outdated libraries.

Screenshot 2024-05-21 at 1 21 55 PM
Screenshot 2024-05-21 at 1 21 49 PM

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions