Find weak hash algorithms
ProprietaryMarks calls that select MD2, MD4, MD5, MD6, SHA-1, SHA-224, RIPEMD, HAVAL-128 or DSA through a JCA getInstance such as MessageDigest, Mac, Signature or KeyPairGenerator, including names like HmacSHA1 that contain one, or through Commons Codec, Spring or Guava helpers like DigestUtils.md5Hex, and Spring Security's deprecated password encoders. MD5 and SHA-1 digests fed only file content are skipped as checksums, as are algorithm names not resolvable to a constant. Test sources are not searched.
io.mod run .Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.