The System.Data.HashFunction.Core dependency pulls in all of .NETStandard1.6 and it's libraries

[EraYaN]

The System.Data.HashFunction.Core dependency which in itself is .NET Standard 1.1 and that depends on https://www.nuget.org/packages/NETStandard.Library/1.6.1 which pulls in a ton on vulnerable dependencies by default (which are also all not required).

This repo seems to have taken over the leaf package: https://github.com/Deskasoft/Data.HashFunction but no issue tracker so no way to get them to stop listing netstandard1.1 as the only .NET Standard version. I have sent them an email so who knows they might be open to rolling out a release.

Microsoft also recommends against targeting 1.1 https://learn.microsoft.com/en-us/dotnet/standard/net-standard#which-net-standard-version-to-target

Would this project be open to a version bump if the leaf package releases?

[Olof-Lagerkvist]

I think the best way forward would be to drop System.Data.HashFunction.Core entirely and use built-in hash algorithms instead. It looks like this repo is practically abandoned however, so it likely needs to continue in a fork instead.