Do you care if github.com/lestrrat-go/jwx's error messages become short (or not)? I have a set of changes (coded using AI) that shortens the default error message into it's outer-most and inner-most messages only instead of my usual "cram every piece of evidence in the error" approach. Let me know if you have an opinion one way or the other #golang #jwx

https://github.com/lestrrat-go/jwx/pull/1532

So, honestly. Do you consider a library _LESS SECURE_ because its underlying libraries have not received updates in the last two years? #golang #foss #jwt #jwx

https://github.com/lestrrat-go/jwx/issues/1146

If said libraries have tons of unhandled issues, sure. But I have fixed whatever that was reported, and other than that they haven't received any bug reports.

If anything, I'd argue that I was able to isolate very specific pieces of non-essential logic, and churned out very stable set of libraries

Released https://github.com/lestrrat-go/jwx/releases/tag/v2.1.0

Because there's a minor breaking change in jwt.ParseRequest(), the new release of http://github.com/lestrrat-go/jwx is bumping its minor version from v2.0.21 to v2.1.0 #golang #jwt #jwx