update package dependencies

[jrayback]

Eliminates sketchy packages:

• text-encoding (remove)
• urlsafe-base64 (remove in favor of native node.js capability)
• ecdsa-secp256r1 (replace with @noble/curves)
  fixes text-encoding npm package no longer maintained? Do we care? #6
  fixes Suggest moving off of ecdsa-secp256r1 npm package in favor of @noble/curves #12
  fixes urlsafe-base64 package vs. built-in node.js Buffer.from() and buf.toString() with 'base64url' flag? #13

[jrayback]

The only dependencies we have now are the two maintained/audited @noble packages and the libsodium package.

[pfeairheller]

If you are removing the urlsafe-base64 in favor of Node native calls are you pinning this library to be Node only? Meaning will it no longer be available for Browsers?

[kentbull]

That was my question as well. Will the Buffer.from(<string value> ,'base64url') and Buffer.from([<buffer raw val>]).toString('base64url') syntax work only in Node or does that work with browsers as well?

[AlexAndrei98]

One thing I noticed is that in signify we do the following

import { Buffer } from 'buffer';

try {
    window.Buffer = Buffer;
} catch (e) {}

Currently trying to refactor signify to use cesr-ts but It will probably take me the weekend!

[jrayback]

Yes, @AlexAndrei98 , and the Node.js docs explicitly suggest import { Buffer } from 'node.buffer' for precisely this reason, I imagine (disambiguation). Let me look further into this. I'll make a commit to this PR containing a better approach.

[jrayback]

Looks like the import statement @AlexAndrei98 quotes above references the buffer npm package here. This package makes the buffer module from node.js available in browsers. The project seems well-maintained and very widely used. Also, it appears that we're already using it in signify.ts. I'll see if I can rework this PR to leverage this package rather than reverting to urlsafe-base64. Please advise if any objections to this approach.

[jrayback]

OK. Using the buffer npm package now. This will make the functionality of the native node.js module available widely in browsers. @pfeairheller , I think we're all set to merge this now.

[jrayback]

fixes #7