passlib is unmaintained

[brassy-endomorph]

Is your feature request related to a problem? Please describe.

Passlib has not been updated in 4 years. We get this deprecation warning.

passlib/utils/__init__.py:854: DeprecationWarning: 'crypt' is deprecated and slated for removal in Python 3.13
    from crypt import crypt as _crypt

Describe the solution you'd like

1. Remove passlib and do our own thing
2. Vendor passlib and update it as needed
3. See if someone trustworthy else has make a passlib2 or similar and use that
4. Fork passlib, republish for the good of the community, and maintain that

All of these have drawbacks, and I'm not at this time proposing we take any particular path. This issue is just to draw attention and document it.

Describe alternatives you've considered

return to monk and burn the puters

Additional context

This is my fault as I opened #275 and recommended passlib without realizing how unmaintained it was

[rmlibre]

The argon2_cffi package should be used for argon2 use cases.

Meanwhile, both the cryptography package and the stdlib's hashlib contain scrypt references.

These seem to be the only use cases for passlib, making replacement straightforward.