Em.

Add handling of intermediate certs in x5u

1

I'm thinking about working on this topic. Currently we're relying on `Cert.new()` and `Cert.verify_trust()` that have been initially contributed by @dhiltgen According to the **[RFC](https://tools.ietf.org/html/rfc7515#section-4.1.5)** _"The certificate containing the public...

How to properly cope with certificate renewal?

3

The lib provides a way to validates certs through `jwt:set_trusted_certs_file("/path/to/may/cert.pem")`. We're currently assessing the integrity of jwts by - first validating the public cert exposed by the `x5u` claim against...

Transitive dependency uglify.js is vulnerable is Regular Expression Injection

4

Halacious 3.4.0 (latest available version) depends on [swig](https://www.npmjs.com/package/swig) in version 1.4.2 (latest available version, but no longer maintained) which depends on uglify-js in version ~2.4.0 Versions of uglify < 2.6.0...