- Package:
- golang-github-aead-chacha20
- Source:
- golang-github-aead-chacha20
- Submitter:
- Simon Josefsson
- Date:
- 2026-08-26 09:19:01 UTC
- Severity:
- normal
- Tags:
Hi! This package's upstream https://github.com/aead/chacha20 was archived in 2023 and as security-sensitive, we shouldn't be shipping this in forky. Consider removing this package from the archive. The reverse dependency golang-github-jedisct1-xsecretbox incorrectly depended on this package, it was long migrated to use normal Go crypto library in the upstream. I'm making an upload to drop the no longer needed dependencies. /Simon