openpgpjs/openpgpjs v3.0.8 on GitHub

Fixes #690 by correctly escaping dashes
Supports compression in the web worker

Fixes #266 by using the most recent self-signature and most recent primary user when evaluating a key. From RFC4880:

An implementation that encounters multiple self-signatures on the
same object may resolve the ambiguity in any way it sees fit, but it
is RECOMMENDED that priority be given to the most recent self-
signature.