[pkg-go] Bug#1145792: keep golang-github-throttled-throttled out of forky/testing and consider removal

[Simon Josefsson]

Hi

Sounds like a good plan.  I'm happy to help with the new properly named
package if needs to.

However maybe we actually don't need to remove this package nor add a
new one.  We could just bump 'golang-github-throttled-throttled' to
latest v2 upstream and close this bug.  So many packages in Debian uses

In theory, shouldn't the "proper" package name be

   golang-github-throttled-throttled-v2

?

The upstream go.mod import path is github.com/throttled/throttled/v2
according to:

https://github.com/throttled/throttled/blob/master/go.mod
https://github.com/throttled/throttled/blob/v2.15.0/go.mod

The README on 

https://pkg.go.dev/gopkg.in/throttled/throttled.v2#section-readme

says:

   Installation
   go get -u github.com/throttled/throttled

So I think imaginary should be using the recommended import path of
github.com/throttled/throttled and thus the Debian package
should follow that naming.

I may be mistaken, of course, the naming rules are a bit complex...

/Simon

tor 2026-08-27 klockan 11:37 +0200 skrev Andrew Lee:
> Hi Simon, (cc'ed David)
> 
> Thanks for finding this and filing a bug.
> 
> This package is used by another package called `imaginary`:
> https://salsa.debian.org/go-team/packages/imaginary/-/blob/debian/sid/debian/patches/debian/0001-imaginary-throttled-package-update.patch
> 
> If you search the Go import paths on https://pkg.go.dev, you can see
> their details on it's versioning and `go.mod` file:
>  https://pkg.go.dev/gopkg.in/throttled/throttled.v2
>  https://pkg.go.dev/github.com/throttled/throttled/v2
> 
> This shows that `imaginary` needs
> `gopkg.in/throttled/throttled.v2`(which is version 2.2.5). It should
> not use `github.com/throttled/throttled/v2` with version (>> 2.2.5).
> 
> So, we should fork and rename this package to
> `golang-gopkg-throttled-throttled.v2` to match its import path, and
> then update it to the latest version 2.2.5 instead of only removal
> it.
> After that, we can remove the hacks from `imaginary`.
> 
> @David, could you please do the following?
> 
> 1. Fork the repository under Go team namespace on salsa.
> 2. Rename the package and update vcs-tags to match its Go import path
> and new salsa repo path.
> 3. Update it to the latest version.
> 4. Remove your workaround patch from the `imaginary` package.
> 
> I can review your MR and sponsor the upload.
> 
> Best regards,
> -Andrew
> 
> On Thu, Aug 27, 2026 at 9:23 AM Simon Josefsson <simon at josefsson.org>
> wrote:
> > 
> > Package: golang-github-throttled-throttled
> > Severity: serious
> > Tags: sid forky
> > 
> > This package ships upstream code (orig.tar) from 2019-12-20.  It
> > has no
> > reverse dependencies in Debian testing, see dak output at the end
> > of
> > this e-mail.
> > 
> > https://tracker.debian.org/pkg/golang-github-throttled-throttled
> > 
> > Having golang-*-dev packages in testing, and consequently the next
> > stable release, has a QA cost.  These packages normally have no use
> > for Debian users, but are intended for building other Debian
> > packages
> > that rely on them.  No package in Debian testing rely on this
> > package.
> > 
> > This bug is filed to trigger discussion if the package is still
> > useful
> > to keep in Debian testing, and also (when no discussion occurs
> > after
> > one week) trigger testing autoremoval of the package.
> > 
> > Please don't take this as disrespect of the amount of work that
> > went
> > into the upstream code, or its packaging -- this bug report is part
> > of
> > a QA effort to remove 100+ unused golang-*-dev packages.  The QA
> > cost
> > associated with keeping all the packages in testing is assumed to
> > be
> > larger than the cost to (hopefully rarely) have some discussion,
> > re-evaluation and closing of this bug report, if there is ever any
> > reasonable need to keep this package in testing.
> > 
> > If you discover this bug report when doing QA work on this package,
> > please consider avoid doing any QA upload, and instead evaluate if
> > the
> > package still has any use in Debian, and consider re-assigning this
> > to
> > a ftp-master RM bug to finally trigger removal of it.
> > 
> > /Simon
> > 
> > ssh mirror.ftp-master.debian.org dak rm -Rn -s=testing golang-
> > github-throttled-throttled
> > Will remove the following packages from testing:
> > 
> > golang-github-throttled-throttled |    2.2.4-3 | source
> > golang-github-throttled-throttled-dev |    2.2.4-3 | all
> > 
> > Maintainer: Debian Go Packaging Team
> > <pkg-go-maintainers at lists.alioth.debian.org>
> > 
> > ------------------- Reason -------------------
> > 
> > ----------------------------------------------
> > 
> > Checking reverse dependencies...
> > No dependency problem found.
> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1252 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20260827/8715cdca/attachment.sig>