github.com/zmap/zcrypto
Open
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
Hello,
cloudflare/cfssl has direct dependency from github.com/zmap/zcrypto. The package becomes our service 4th dependency.
The github.com/zmap/zcrypto Readme file specifies :
"ZCrypto is a research library, designed to be used for data collection and analysis, as well as experimenting and prototyping. It should not be used to provide security for production systems."
We cannot use in production package which is marked by developer as dangerous and experimental .
The is possible to exclude github.com/zmap/zcrypto from dependency ? Could it be optional and driven by configuration?
Contributor guide
Assessment
This issue has not been assessed yet.