Coming from a SDN Partner, I am fairly sure that there was a question in the latest Built For NetSuite questionnaire that actually asked if you were still using SHA1. I know with some languages and libraries it isn't easy to move across, but to be fair, NetSuite had given integration partners (at least those in the SDN) at least a years notice, if not more that they are planning on deprecating SHA1. That is way more than we have gotten from other companies we integrate with. We got 2 weeks notice once to a key internal data structure change, and there was minimal API docs around this change until after they had release the code.