suggestion: replace asn1.js with any updated fork

[tabarra]

Describe the bug
Using jose will sometimes throw DeprecationWarning due to the fact that the dependency asn1.js is outdated and seems abandoned (the fix PR is open since march/2018).

Message

(node:29508) [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from() methods instead.

Environment:

• jose version: 1.18.1
• node version: v12.13.0

Some reading material
indutny/asn1.js#116
indutny/asn1.js#103

[panva]

I don't trust forked releases but I'll see what I can do. I don't believe asn1.js is abandoned or outdated, it's still "just" a deprecation warning. Let's give [at]indutny a nudge over a channel he follows first.

[panva]

All it takes is a nudge.

[tabarra]

Hey @panva, a bit unrelated, but do you mind trying to nudge him again?
Still getting new Buffer() deprecation warnings due to an outdated subdependnecy (bn.js).
Issue: indutny/asn1.js#120
PR: indutny/asn1.js#118

[panva]

I replied to the tweet thread again, but at this point it’s out of my hands.

[panva]

@tabarra so i went ahead, forked asn1.js and removed all its dependencies, including bn.js in favour of BigInt

The 1.23.0 release from yesterday already uses it - see https://bundlephobia.com/result?p=jose@1.23.0

[tabarra]

Very good job Panva!
Thank you very much.