We are currently using crypto-js to encode your password before we send it up to PubPub.
This doesn't seem necessary, as the global crypto object is now standard in webbrowsers and node v20+.
Currently we still support node 18, but once that reaches EOL we should replace crypto-js with globalThis.crypto