Miro Hrončok suggested I send this to the python-devel mailing list after some earlier discussions elsewhere:
The website for python-crypto states that the software is no longer maintained. The same website suggests the presence of security vulnerabilities and presents python-pycryptodome as a replacement. Fedora provides python-pycryptodomex (note the trailing 'x'), which allows that package to coexist with python-crypto. Dependent packages, such as vyper, need to provide patches to make use of python-pycryptodomex's name as a dependency as well as its adjusted namespace (Cryptodome instead of Crypto). The conflict between python-crypto and (the origial) python-pycryptodome that led to python-pycryptodomex was discussed in 2019 [1].
In light of the lack of maintenance, should we offer a formal change proposal to replace python-crypto with python-pycryptodome in Fedora 42 or beyond?
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1756505