search

psanford / tpm-fido

A WebAuthn/U2F token protected by a TPM (Go/Linux)
MIT License
285 stars 17 forks source link

Old deps #38

Open matejsmycka opened 1 month ago

matejsmycka commented 1 month ago

Hi, this project uses unmaintained libraries.

I know "if it works, don't fix it," but for example, https://github.com/foxcpp/go-assuan is more than six years unmaintained. This might present security risks, which is not ideal for this kind of project.

Please investigate if there are better alternatives.

matejsmycka commented 1 month ago

https://github.com/twpayne/go-pinentry This looks like a better resource.

matejsmycka commented 1 month ago

I had a free evening, so I created PR.