Is this unmaintained? I have an alternative, can I help?

[florimondmanca]

Hi @manosim and all :wave:

Is this package unmaintained? The latest accepted PR was in September 2016 and there are a few pending PRs from up to March 2017. :thinking:

I tried using this package for API key authorization but there were a few missing features and some security concerns (keys stored in plaintext?).

I ended up creating djangorestframework-api-key with these missing features. A beta is already released to PyPI.

This package already has some popularity (and is featured in the DRF docs), so :

• I'd be happy to bring the features back into this project.
• However, I am not sure how to handle those that are breaking (e.g. a more secure generation and validation scheme by using a {token, secret key} pair).

Glad to discuss!