davidwood / node-password-hash

Password hashing and verification for node.js
MIT License
153 stars 30 forks source link

Please mark as deprecated with npm deprecate #12

Open toddself opened 8 years ago

toddself commented 8 years ago

Just auditing our software and see that we're using this library. If you mark is a deprecated in NPM users will receive a deprecation error when installing. (It will still install though)

https://docs.npmjs.com/cli/deprecate

toastedcornflakes commented 8 years ago

Agree. This still shows up as #1 result when googling 'hash password nodejs'.

Using SHA1 as default hash for password is not good practice.