Nothing to see here IMO. A large amount of code piled together in a month. Not picking this for my auth. FWIW I’m quite ok with bringing in a well tested/maintained dep…
Curious where you landed on password hashing, since zero deps in Go means you either pull x/crypto for bcrypt/argon2 or hand roll scrypt from stdlib. I've been down that road and stdlib pbkdf2 wasn't there until recently.
Nothing to see here IMO. A large amount of code piled together in a month. Not picking this for my auth. FWIW I’m quite ok with bringing in a well tested/maintained dep…
The readme and commit messages were written by an LLM without disclosure. I didn't look at the code.
Do you need to disclose it when everybody do it ?
[EDIT] It is disclosed in contributors
Curious where you landed on password hashing, since zero deps in Go means you either pull x/crypto for bcrypt/argon2 or hand roll scrypt from stdlib. I've been down that road and stdlib pbkdf2 wasn't there until recently.