Repository navigation
Deprecating jwa and jws packages #40
Description
I have not found the time to properly maintain these packages and @brianloveswords has also been otherwise occupied. Most updates/fixes I would want to do are in some way breaking, or involve a different API. Spending time building a different API seems largely wasteful when other seemingly great packages already exist such as @panva's jose. Seeking new maintainers seems wasteful for the same reason.
I would like to deprecate these packages in order to stop worrying about them and point users to alternatives. Don't have a date in mind, but "soon".
Activity
ahane commentedon Apr 29, 2020
Maybe offer them up to http://auth0.com they are a big cooperation and seem to depend on this package:
https://github.com/auth0/node-jsonwebtoken
maybe their responsible disclosure program is a fast way to reach somebody:
https://auth0.com/responsible-disclosure-policy/
panva commentedon Jul 22, 2021
This repo has been transferred to auth0 last year and there are no concrete plans to deprecate it.