aws / aws/aws-sigv4-auth-cassandra-nodejs-driver-plugin
Remove CryptoJS dependency since its unmaintained
Open
- Dominant language
- JavaScript
- Stars
- 5
- Forks
- 19
- PR merge metrics
- No merged PRs in 30d
Description
This package relies on CryptoJS which is unmaintained and has often some vulnerabilities with latest being critical.
You rely on it for some hmac calculation. We can use native node crypto operations for them.
Would you accept a PR for this?
Contributor guide
Research direction
Start by locating the CryptoJS dependency and the HMAC calculation in the repository. Replace that usage with native Node.js crypto operations, remove the dependency, and verify that the SigV4 authentication behavior remains unchanged.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, node.js
- Domain
- authentication, backend
- Issue type
- Refactor
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100