hr.go        |  3 +--
 integrity.go |  7 +++----
 json.go      |  3 +--
 list.go      |  5 ++---
 refresh.go   | 11 +++++------
 upload.go    |  3 +--

diff --git a/hr.go b/hr.go
index 0a2f921f5bac6a31490aaf1fd00842aada1a7dee5d4b7da4df877c98a8edf793..30afb3516a2e25dc3d252b4c821218702583a867579ad3dee6b0fa948c2f33cc 100644
--- a/hr.go
+++ b/hr.go
@@ -21,7 +21,6 @@ import (
 	"bytes"
 	_ "embed"
 	"html/template"
-	"io/ioutil"
 	"log"
 	"net/http"
 	"os"
@@ -40,7 +39,7 @@ 	HRPkgTmpl    = template.Must(template.New("hr-pkg").Parse(HRPkgTmplRaw))
 )
 
 func serveHRRoot(w http.ResponseWriter, r *http.Request) {
-	files, err := ioutil.ReadDir(Root)
+	files, err := os.ReadDir(Root)
 	if err != nil {
 		log.Println("error", r.RemoteAddr, "hr-root", err)
 		http.Error(w, err.Error(), http.StatusInternalServerError)
diff --git a/integrity.go b/integrity.go
index f09e22f2306aa1b51a8219e18ac2107bdfcdcff8e6e57be087b3adc22ebc31f0..e48e9cdd9ad05fc971f7762e2e3f6145d5895beb0ffdc9bf4c24fbafcdb03abe 100644
--- a/integrity.go
+++ b/integrity.go
@@ -24,7 +24,6 @@ 	"crypto/sha256"
 	"fmt"
 	"hash"
 	"io"
-	"io/ioutil"
 	"log"
 	"os"
 	"path/filepath"
@@ -37,7 +36,7 @@ func checkFile(
 	pkgName, fn, fnHash, hasherName string,
 	hasher hash.Hash, digest []byte,
 ) bool {
-	expected, err := ioutil.ReadFile(fnHash)
+	expected, err := os.ReadFile(fnHash)
 	if err != nil {
 		log.Fatal(err)
 	}
@@ -64,7 +63,7 @@ 	return false
 }
 
 func goodIntegrity() bool {
-	dirs, err := ioutil.ReadDir(Root)
+	dirs, err := os.ReadDir(Root)
 	if err != nil {
 		log.Fatal(err)
 	}
@@ -75,7 +74,7 @@ 	digestBLAKE2b256 := make([]byte, blake2b.Size256)
 	isGood := true
 	var pkgName string
 	for _, dir := range dirs {
-		files, err := ioutil.ReadDir(filepath.Join(Root, dir.Name()))
+		files, err := os.ReadDir(filepath.Join(Root, dir.Name()))
 		if err != nil {
 			log.Fatal(err)
 		}
diff --git a/json.go b/json.go
index f3815700ae812c987001f160368ba76d24994dcf18e2579bf1e70f90a3812d89..ea750587d9fbae32bf2dfa605697f3cd6b61c95f53b5ee2c6da2ad4a3e70b03f 100644
--- a/json.go
+++ b/json.go
@@ -20,7 +20,6 @@
 import (
 	"bytes"
 	"encoding/json"
-	"io/ioutil"
 	"log"
 	"net/http"
 	"os"
@@ -35,7 +34,7 @@ 	serial, releases, err := listDir(pkgName, true)
 	if err != nil {
 		return nil, nil, err
 	}
-	md, err := ioutil.ReadFile(filepath.Join(Root, pkgName, MDFile))
+	md, err := os.ReadFile(filepath.Join(Root, pkgName, MDFile))
 	if err != nil {
 		if !os.IsNotExist(err) {
 			return nil, nil, err
diff --git a/list.go b/list.go
index 32a99be65482b26a42ae64c973a4fc2b3fbca9ae0a76cfe4335223f769ff4a15..ace635c833569102784b09967a7cc27d33188fc675c599d94a9a5220b08282de 100644
--- a/list.go
+++ b/list.go
@@ -25,7 +25,6 @@ 	"errors"
 	"fmt"
 	"html/template"
 	"io/fs"
-	"io/ioutil"
 	"log"
 	"net/http"
 	"os"
@@ -50,7 +49,7 @@ 		".exe", ".dmg", ".msi", ".rpm", ".deb", ".tgz"}
 )
 
 func listRoot(w http.ResponseWriter, r *http.Request) {
-	files, err := ioutil.ReadDir(Root)
+	files, err := os.ReadDir(Root)
 	if err != nil {
 		log.Println("error", r.RemoteAddr, "root", err)
 		http.Error(w, err.Error(), http.StatusInternalServerError)
@@ -147,7 +146,7 @@ 			if !strings.HasSuffix(fn, "."+algo) {
 				continue
 			}
 			delete(files, fn)
-			digest, err := ioutil.ReadFile(filepath.Join(dirPath, fn))
+			digest, err := os.ReadFile(filepath.Join(dirPath, fn))
 			if err != nil {
 				return 0, nil, err
 			}
diff --git a/refresh.go b/refresh.go
index 726bf29bd799241698e7ef6f947f3db2bcf911adb89571866cde5fb22ebbe639..4244f01716e8e5116ec9b317814670aa7931854d91ec10709bc1ac233a94311d 100644
--- a/refresh.go
+++ b/refresh.go
@@ -28,7 +28,6 @@ 	"encoding/json"
 	"errors"
 	"hash"
 	"io"
-	"io/ioutil"
 	"log"
 	"net/http"
 	"net/url"
@@ -115,7 +114,7 @@ 			)
 			http.Error(w, "PyPI has non 200 status code", http.StatusBadGateway)
 			return false
 		}
-		body, err := ioutil.ReadAll(resp.Body)
+		body, err := io.ReadAll(resp.Body)
 		if err != nil {
 			resp.Body.Close()
 			log.Println("error", r.RemoteAddr, "refresh-json", pkgName, err)
@@ -240,7 +239,7 @@ 		if !mkdirForPkg(w, r, pkgName) {
 			return false
 		}
 		path := filepath.Join(dirPath, MDFile)
-		existing, err := ioutil.ReadFile(path)
+		existing, err := os.ReadFile(path)
 		if err != nil || bytes.Compare(existing, buf.Bytes()) != 0 {
 			if err = WriteFileSync(dirPath, path, buf.Bytes(), now); err != nil {
 				log.Println("error", r.RemoteAddr, "refresh-json", path, err)
@@ -284,7 +283,7 @@ 		)
 		http.Error(w, "PyPI has non 200 status code", http.StatusBadGateway)
 		return false
 	}
-	body, err := ioutil.ReadAll(resp.Body)
+	body, err := io.ReadAll(resp.Body)
 	resp.Body.Close()
 	if err != nil {
 		log.Println("error", r.RemoteAddr, "refresh", pkgName, err)
@@ -434,7 +433,7 @@ 				dst.Close()
 				http.Error(w, "digest mismatch", http.StatusBadGateway)
 				return false
 			}
-			if digestStored, err := ioutil.ReadFile(path + "." + hashAlgo); err == nil &&
+			if digestStored, err := os.ReadFile(path + "." + hashAlgo); err == nil &&
 				bytes.Compare(digest, digestStored) != 0 {
 				err = errors.New("stored digest mismatch")
 				log.Println("error", r.RemoteAddr, "pypi", filename, err)
@@ -531,7 +530,7 @@ 			if resp.StatusCode != http.StatusOK {
 				resp.Body.Close()
 				goto GPGSigSkip
 			}
-			sig, err := ioutil.ReadAll(resp.Body)
+			sig, err := io.ReadAll(resp.Body)
 			resp.Body.Close()
 			if err != nil {
 				goto GPGSigSkip
diff --git a/upload.go b/upload.go
index dcc2eb85b118b855f50aab7349dc7e14feab36a1b129cb6a012dcfcc4126b02d..55af2edbc7c4b808a8d59735a3d732cb6f8ec76e73e47fea6278faba62d5972c 100644
--- a/upload.go
+++ b/upload.go
@@ -24,7 +24,6 @@ 	"bytes"
 	"crypto/sha256"
 	"encoding/hex"
 	"io"
-	"io/ioutil"
 	"log"
 	"net/http"
 	"os"
@@ -215,7 +214,7 @@ 			log.Println("error", r.RemoteAddr, filename, err)
 			http.Error(w, err.Error(), http.StatusInternalServerError)
 			return
 		}
-		sig, err := ioutil.ReadAll(src)
+		sig, err := io.ReadAll(src)
 		src.Close()
 		if err != nil {
 			log.Println("error", r.RemoteAddr, filename, err)