If it's in "suggests", it's perfectly possible to install the package with all the dependencies it claims to have, call a function, and then be told that you don't have all the dependencies. Instead it should be moved to depends, and a corresponding import tag added to the roxygen2 docs.
(Also you may want to look at the openssl package - it does the same thing as digest except it's cryptographically tested, unlike digest, and for bonus points is vectorised in compiled code, so it's faster and has no need for a vapply loop!)
If it's in "suggests", it's perfectly possible to install the package with all the dependencies it claims to have, call a function, and then be told that you don't have all the dependencies. Instead it should be moved to depends, and a corresponding import tag added to the roxygen2 docs.
(Also you may want to look at the openssl package - it does the same thing as digest except it's cryptographically tested, unlike digest, and for bonus points is vectorised in compiled code, so it's faster and has no need for a vapply loop!)