Composer package
KarelWintersky opened this issue · comments
Please, build composer package for this repo
From README:
Since there are better options, this code is now in "maintenance mode." Only bugs will be fixed, no new features will be added. It is currently safe to use, but using libsodium would be better.
I know, that libsodium is BETTER. But now, we can't use it. Due to legacy code.
Agreed, publishing this via composer would be useful (ETA 0.5-1.5mn until I get around to this if I'm being honest)
bump ;)
I'm tentatively deciding not to do this since doing it would remove a barrier to entry to using this library when, in the minimum security-supported version of PHP, there is password_hash and password_verify which should be preferred. New code should use those functions, and I think it's reasonable for projects that are already using this library to keep doing what they're doing currently. Unless not putting the library on composer significantly harms those projects in a way I'm not imagining? Thoughts?
(I've also added a recommendation for password_hash and password_verify to the README since they're far more accessible than libsodium)
We use your code in old, legacy project. :(
Is not having it on composer preventing you from doing anything? Would it work to just copy the file into your project?