MetaMask / MetaMask/tkey

Security issue: replace bad cryptography

Open
#239 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
181
Forks
53
PR merge metrics
No merged PRs in 30d

Description

https://github.com/tkey/tkey/blob/8512f3493e1eb00bdf752bdc706e765f12a81c68/packages/core/package.json#L42

The library has long been unmaintained: it is advised to replace it with audited `@noble/curves`

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with packages/core/package.json at line 42 to identify the unmaintained cryptography dependency, then inspect the repository for its consumers and compare the required APIs with audited @noble/curves. Done means the old library is replaced without breaking the existing TypeScript package behavior and the project's validation passes.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
cryptography, security
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.