Releases?

[Former user]

It looks like a lot of development has happened since the last version was uploaded to maven. Have you any plans to do another release?

[Brian Campbell]

Yes but I don't yet have specific plans on the timing. I was roughly thinking of doing a new release (probably v0.5.0) in the next month or so.

Is there a particular unreleased feature that you need? Or was it a more general question?

[boosh]

I saw this post and saw a lot of development in this repo so wanted to make sure I had the latest fixes. I've gone with the nimbus one now though, so no hurry.

[Brian Campbell]

This https://bitbucket.org/b_c/jose4j/wiki/04-01-15-Transparency has a little more info on the issues from that post and the extent to which this library is vulnerable. TL;DR - it isn't expect for one case when using using bouncy castle and that was fixed in the 0.4.4 release.

[Brian Campbell]

released v 0.5.0 today