[pkg-go] Bug#1089714: remove golang-github-nebulouslabs-ed25519

[Simon Josefsson]

Package: golang-github-nebulouslabs-ed25519
Severity: serious

Hi.  According to upstream

https://github.com/nebulouslabs/ed25519

it is a 9+ year old fork of a another project:

https://github.com/agl/ed25519

And that project has declared itself unmaintained, and say that people
should be using Go's x/crypto/ed25519 instead.  I believe there is harm
in having golang-github-nebulouslabs-ed25519 in Debian trixie because it
may confuse someone to use it.

The only reverse dependency in Debian is 'sia'.  The Build-Depend is not
necessary for building sia any more, so I have uploaded a new verison to
fix that:

https://tracker.debian.org/pkg/sia

Removing golang-github-nebulouslabs-ed25519 should be safe after sia is
fixed.  See dak output below.

I'm opening this bug to hopefully trigger removing from testing as a
first step.  We can follow up with removing this from unstable too later
on.

See also related removal request on golang-ed25519-dev:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1089692

If anyone see value in retaining this package, please speak up.

/Simon

jas at coccia:~$ dak rm -Rn -b golang-github-nebulouslabs-ed25519-dev
Will remove the following packages from unstable:

golang-github-nebulouslabs-ed25519-dev | 0.0~git20150728.0.0e573b1-1.1 | all

Maintainer: Debian Go Packaging Team <pkg-go-maintainers at lists.alioth.debian.org>

------------------- Reason -------------------

----------------------------------------------

Checking reverse dependencies...
# Broken Build-Depends:
sia: golang-github-nebulouslabs-ed25519-dev

Dependency problem found.

jas at coccia:~$ 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 255 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20241211/6a5cb584/attachment.sig>