There is a new lib/polyfill/userland implementation for Sodium in PHP by a well-known crypto-guy:https://github.com/paragonie/sodium_compat

When it is finished (and this scary message goes away) we can replace the old, outdated and unmaintained implementation "Salt".