[Pkg-privacy-maintainers] Bug#1089692: remove golang-ed25519-dev

Simon Josefsson simon at josefsson.org
Wed Dec 11 12:49:34 GMT 2024


Package: golang-ed25519-dev
Severity: serious

Hi.  According to upstream

https://github.com/agl/ed25519

this project is unmaintained, and people should be using Go's
x/crypto/ed25519 instead.  I believe there is harm in having this
package go into the Debian trixie because it may confuse someone to use
it.

The only reverse dependency in Debian is dnscrypt-proxy however upstream
fixed this problem long ago.  The Build-Depend is not necessary for
building dnscrypt-proxy any more, see:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1087021

Removing this package should be safe after that has been fixed:

jas at coccia:~$ dak rm -Rn -b   golang-ed25519-dev
Will remove the following packages from unstable:

golang-ed25519-dev | 0~20140907.d2b94fd-4.1 | all

Maintainer: Debian Privacy Tools Maintainers <pkg-privacy-maintainers at lists.alioth.debian.org>

------------------- Reason -------------------

----------------------------------------------

Checking reverse dependencies...
# Broken Build-Depends:
dnscrypt-proxy: golang-ed25519-dev

Dependency problem found.

jas at coccia:~$ 

I'm opening this bug to hopefully trigger removing from testing as a
first step.  We can follow up with removing this from unstable too later
on.

If anyone see value in retaining this package, please speak up.

/Simon
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 255 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-privacy-maintainers/attachments/20241211/731862d0/attachment.sig>


More information about the Pkg-privacy-maintainers mailing list