Package: golang-github-nebulouslabs-ed25519 Severity: serious Hi. According to upstream
https://github.com/nebulouslabs/ed25519 it is a 9+ year old fork of a another project: https://github.com/agl/ed25519 And that project has declared itself unmaintained, and say that people should be using Go's x/crypto/ed25519 instead. I believe there is harm in having golang-github-nebulouslabs-ed25519 in Debian trixie because it may confuse someone to use it. The only reverse dependency in Debian is 'sia'. The Build-Depend is not necessary for building sia any more, so I have uploaded a new verison to fix that: https://tracker.debian.org/pkg/sia Removing golang-github-nebulouslabs-ed25519 should be safe after sia is fixed. See dak output below. I'm opening this bug to hopefully trigger removing from testing as a first step. We can follow up with removing this from unstable too later on. See also related removal request on golang-ed25519-dev: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1089692 If anyone see value in retaining this package, please speak up. /Simon jas@coccia:~$ dak rm -Rn -b golang-github-nebulouslabs-ed25519-dev Will remove the following packages from unstable: golang-github-nebulouslabs-ed25519-dev | 0.0~git20150728.0.0e573b1-1.1 | all Maintainer: Debian Go Packaging Team <pkg-go-maintain...@lists.alioth.debian.org> ------------------- Reason ------------------- ---------------------------------------------- Checking reverse dependencies... # Broken Build-Depends: sia: golang-github-nebulouslabs-ed25519-dev Dependency problem found. jas@coccia:~$
signature.asc
Description: PGP signature
