Public bug reported: [Availability]
The package is available in universe. [Rationale] The package is now a build dependency of golang-goprotobuf, itself a build dependency of lxd. [Security] The package is fairly new and has not had any CVEs reported. The package is maintained by the same group of developers as go upstream and various other golang.org/x packages such as golang-go.crypto who have historically taken security bugs seriously. [Quality assurance] There are no open bugs in Debian (https://bugs.debian.org/cgi- bin/pkgreport.cgi?src=golang-golang-x-sync) or Ubuntu (https://bugs.launchpad.net/ubuntu/+source/golang-golang-x-sync). The package runs its tests as part of the build process. The package does not have a watch file or README.source, but it's a completely standard go library package for an upstream that does not tag releases. [Dependencies] All dependencies are already in main. [Standards compliance] The package is lintian clean. [Maintenance] TBD ** Affects: golang-golang-x-sync (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1711265 Title: [MIR] golang-golang-x-sync To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/golang-golang-x-sync/+bug/1711265/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
