Security issue: replace bad cryptography
Open
- Dominant language
- TypeScript
- Stars
- 181
- Forks
- 53
- PR merge metrics
- No merged PRs in 30d
Description
https://github.com/tkey/tkey/blob/8512f3493e1eb00bdf752bdc706e765f12a81c68/packages/core/package.json#L42
The library has long been unmaintained: it is advised to replace it with audited `@noble/curves`
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with packages/core/package.json at line 42 to identify the unmaintained cryptography dependency, then inspect the repository for its consumers and compare the required APIs with audited @noble/curves. Done means the old library is replaced without breaking the existing TypeScript package behavior and the project's validation passes.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- cryptography, security
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100