*blowfish* is deprecated, `crypto.createCipher` is deprecated, and it's not a hash but a cipher. Without a salt, your `secret` is not a secret, everybody can forge a signature. Do you need some help for a PR?
blowfish is deprecated,
crypto.createCipheris deprecated, and it's not a hash but a cipher.Without a salt, your
secretis not a secret, everybody can forge a signature.Do you need some help for a PR?