biscuit icon indicating copy to clipboard operation
biscuit copied to clipboard

Is this crate still being maintained?

Open augustocdias opened this issue 3 years ago • 5 comments

Hi,

I'd like to ask what is the status of this project going forward... It seems there's not much happening.

Is this project still active? If we submit PR's, are them going to be reviewed and released?

We're planning on using this library but we require some features that are not yet implemented, for instance EdDSA support.

augustocdias avatar Aug 24 '22 20:08 augustocdias

Best effort basis.

I can try to look at PRs but I might not have the time. If this is critical to your project, I am happy to add you or someone else on your team as a maintainer. Or, you can consider forking it.

lawliet89 avatar Aug 26 '22 01:08 lawliet89

I think adding us as maintainers could work. We will discuss this internally and come back to you.

augustocdias avatar Aug 26 '22 10:08 augustocdias

Even if nothing else is done, the dependency cleanup (disabling default features where they are not required) that was already done in master would be amazing as a patch release for 0.5... Right now anything that depends on biscuit gets a whole lot of unnecessary stuff (including time 0.1.x, which is affected by a CVE) in the dependency tree.

jbg avatar Jan 16 '23 08:01 jbg

well the dependency on ring I mentioned in #42 and hence all the associated CVEs there are also a problem

nullr0ute avatar Feb 17 '23 16:02 nullr0ute

Hi @lawliet89 Happy to help out with maintenance.

olger avatar Nov 05 '23 16:11 olger