Open omsmith opened 4 years ago
Maybe offer them up to http://auth0.com they are a big cooperation and seem to depend on this package: https://github.com/auth0/node-jsonwebtoken
maybe their responsible disclosure program is a fast way to reach somebody: https://auth0.com/responsible-disclosure-policy/
This repo has been transferred to auth0 last year and there are no concrete plans to deprecate it.
I have not found the time to properly maintain these packages and @brianloveswords has also been otherwise occupied. Most updates/fixes I would want to do are in some way breaking, or involve a different API. Spending time building a different API seems largely wasteful when other seemingly great packages already exist such as @panva's jose. Seeking new maintainers seems wasteful for the same reason.
I would like to deprecate these packages in order to stop worrying about them and point users to alternatives. Don't have a date in mind, but "soon".