Upgrade unmaintained github.com/lestrrat-go/jwx/v2 to v3
Open
Beginner friendly
contribution
first-time-contributor
type/enhancement
- Dominant language
- Go
- Stars
- 40.5k
- Forks
- 6.2k
- PR merge metrics
- PR metrics pending
Description
## Enhancement
github.com/lestrrat-go/jwx/v2 is no longer maintained. Current latest is v4, but since v4 requires go 1.26, it should be upgraded to v3.2.0.
As the author of jwx, I really would like to see all jwx < v3 eradicated from all major consumers, because they can be source for potential security issues.
I will provide a PR later.
Contributor guide
Research direction
The issue names github.com/lestrrat-go/jwx/v2 but no file or test. Start by locating its Go module declaration and all v2 references, then update the dependency to v3.2.0 and verify the repository's existing checks pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- databases
- Issue type
- Refactor
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 66/100