Fork and maintain stale dependency: `bcryptjs`

[riceharvest]

Context

bcryptjs is a very popular and stable security package but has not had an npm release in a long time.

• Risk Level: Medium
• Notes: Relying on unmaintained third-party crypto can be risky long-term, especially as Node.js and frameworks evolve.

Action Required

• We should fork bcryptjs into @opensourceframework and actively maintain it.
• This will provide a safe, drop-in replacement (@opensourceframework/bcryptjs) for our own projects and the wider community so they don't have to rewrite their codebases.

Links

• NPM: https://www.npmjs.com/package/bcryptjs
• Repository: https://github.com/dcodeIO/bcrypt.js