Skip to content

feat: remove ethereum-cryptography package#299

Merged
natanasow merged 4 commits intomainfrom
remove-ethereum-cryptography-package
Feb 2, 2026
Merged

feat: remove ethereum-cryptography package#299
natanasow merged 4 commits intomainfrom
remove-ethereum-cryptography-package

Conversation

@natanasow
Copy link
Copy Markdown
Member

Description:

Remove ethereum-cryptography due to multiple security alerts and replace it with bip32 and bip39.

Related issue(s):

Fixes #

Notes for reviewer:

Checklist

  • Documented (Code comments, README, etc.)
  • Tested (unit, integration, etc.)

Signed-off-by: nikolay <n.atanasow94@gmail.com>
@natanasow natanasow added the Improvement Code changes driven by non business requirements label Jan 26, 2026
@swirlds-automation
Copy link
Copy Markdown

swirlds-automation commented Jan 26, 2026

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@natanasow natanasow self-assigned this Jan 26, 2026
Signed-off-by: nikolay <n.atanasow94@gmail.com>
Signed-off-by: nikolay <n.atanasow94@gmail.com>
Signed-off-by: nikolay <n.atanasow94@gmail.com>
@natanasow natanasow marked this pull request as ready for review January 27, 2026 15:25
@natanasow natanasow requested a review from a team as a code owner January 27, 2026 15:25
Copy link
Copy Markdown
Member

@quiet-node quiet-node left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Copy Markdown

@jasuwienas jasuwienas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks great!

What is bothering me are the failing jobs in gh actions. This job https://github.com/hashgraph/hedera-forking/actions/runs/21401327998/job/61711283186?pr=299 appears to keep failing due to the same error each time I run it. BUt it fails on other pull requests as well so I guess it is not related to your changes

(@natanasow but this is just my assumption, we should make sure the CI pipelines aren’t failing because of this PR before wemerge it).

@natanasow
Copy link
Copy Markdown
Member Author

@jasuwienas

These CI pipelines also fail on main. The PR aims to fix security alerts across current npm packages. We can open a new task for fixing the pipelines.

@natanasow natanasow merged commit 47047da into main Feb 2, 2026
66 of 80 checks passed
@natanasow natanasow deleted the remove-ethereum-cryptography-package branch February 2, 2026 12:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Improvement Code changes driven by non business requirements

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants