Dependabot alerts

Question

Opened this issue 3 years ago · 2 comments

Answer 1 · 2021-08-03T15:00:32.000Z

@skiffer-git this repository is no longer maintained

The new repository can be found at: https://github.com/golang-jwt/jwt

For more information, see issue #462 and #462 (comment)

Answer 2 · 2021-10-23T20:03:21.000Z

Most easy way to get rid of this library is

replace github.com/dgrijalva/jwt-go v3.2.0+incompatible => github.com/golang-jwt/jwt/v4 v4.1.0

and this helps also for 3rd party libs it's a

Community maintained clone of https://github.com/dgrijalva/jwt-go