Skip to content

Remove redundant paragonie/random_compat dependency#155

Open
brendt wants to merge 2 commits into
WyriHaximus:5.xfrom
brendt:compat/remove-paragonie-random_compat
Open

Remove redundant paragonie/random_compat dependency#155
brendt wants to merge 2 commits into
WyriHaximus:5.xfrom
brendt:compat/remove-paragonie-random_compat

Conversation

@brendt

@brendt brendt commented Apr 3, 2026

Copy link
Copy Markdown

This package depends on paragonie/random_compat: ^9.0 || ^2.0, but also php: ^8 || ^7.4. Since random_bytes and random_int were added in PHP 7.0, the dependency on paragonie/random_compat seems redundant?

@brendt
brendt requested a review from WyriHaximus as a code owner April 3, 2026 09:47
@boring-cyborg boring-cyborg Bot added Dependencies 📦 Pull requests that update a dependency file JSON 👨‍💼 PHP 🐘 Hypertext Pre Processor labels Apr 3, 2026
@paragonie-security

Copy link
Copy Markdown

paragonie/ristretto-php#1 (comment)

@WyriHaximus WyriHaximus left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey and thanks for taking the time to put this PR together. While @paragonie-security makes a great point, at this point I'm more in favour of dropping this and adding ext-libsodium as a hard requirement for this package. Could you also include the updated composer.lock with the changeset, thanks.

@brendt

brendt commented Apr 7, 2026

Copy link
Copy Markdown
Author

@WyriHaximus Done :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies 📦 Pull requests that update a dependency file JSON 👨‍💼 PHP 🐘 Hypertext Pre Processor

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants