passlib dependency is unmaintained
Ever since 182ba1d53b16, cc5aba3b12c7 and so on (see #4161 (closed)) passlib
is used for securing user passwords. I think it is wise to reuse a FOSS library but nowadays passlib
maintenance is under struggle.
See python-libs/passlib#187 for the main discussion.
This might lead to security vulnerabilities in the mid-term e.g. if a CVE went unpatched, passlib
ownership was moved to the wrong hands or PyPI project owner account was hijacked.
Just wanted the rise awareness about this fact and cross-link their issue, I don't think there is much to be done in the Tryton codebase. Best path forward might be to join efforts with the passlib
community to reboot it and let this issue be a discussion about this.