digest should be in depends, not suggests, and imported
If it's in "suggests", it's perfectly possible to install the package with all the dependencies it claims to have, call a function, and then be told that you don't have all the dependencies. Instead it should be moved to depends, and a corresponding import tag added to the roxygen2 docs.
(Also you may want to look at the openssl package - it does the same thing as digest except it's cryptographically tested, unlike digest, and for bonus points is vectorised in compiled code, so it's faster and has no need for a vapply loop!)
That's great, thanks for the issue Oliver (and my apologies for taking this long to respond to it).
Do you use anonymizer at all for any of your projects? Just wondering out of curiosity...