[Pkg-rust-maintainers] Bug#1033333: Don't include in Bookworm

Moritz Muehlenhoff jmm at inutil.org
Fri Mar 24 14:24:49 GMT 2023


Hi Peter,

On Thu, Mar 23, 2023 at 09:23:18PM +0000, Peter Green wrote:
> severity 1033333 normal
> retitle 1033333 rust-encoding is unmaintained upstream
> severity 1033334 normal
> retitle 1033334 rust-boxfnonce is unmaintained upstream
> severity 1033335 normal
> retitle 1033335 rust-const-cstr is unmaintained upstream
> 
> (summarising several bugs)
> > there is https://rustsec.org/advisories/RUSTSEC-{advisory}.html which flags
> > that rust-{crate} is unmaintained. Since there are no reverse deps in the
> > archive, let's exclude it from bookworm (or rather remove rightaway)?
> 
> I don't know what tool you are using to check for reverse dependencies but
> whatever it is does not seem to take account of virtual packages correctly.

I've been running a simulated removal using dak itself, as documented here:
https://wiki.debian.org/ftpmaster_Removals#Before_requesting_removal

Which I suppose also means that ftp.debian.org removals might leave packages behind?

> While I agree it's good to move away from crates that are abandoned upstream,
> I think it's too late to do so for bookworm and I don't think any of these
> crates are sensitive enough to consider such maintenance issues as rc.

Sure, that's fair enough, of course. I filed those bugs under the assumption that these
already were without rdeps.

Cheers,
        Moritz



More information about the Pkg-rust-maintainers mailing list