Hi Peter, On Thu, Mar 23, 2023 at 09:23:18PM +0000, Peter Green wrote: > severity 1033333 normal > retitle 1033333 rust-encoding is unmaintained upstream > severity 1033334 normal > retitle 1033334 rust-boxfnonce is unmaintained upstream > severity 1033335 normal > retitle 1033335 rust-const-cstr is unmaintained upstream > > (summarising several bugs) > > there is https://rustsec.org/advisories/RUSTSEC-{advisory}.html which flags > > that rust-{crate} is unmaintained. Since there are no reverse deps in the > > archive, let's exclude it from bookworm (or rather remove rightaway)? > > I don't know what tool you are using to check for reverse dependencies but > whatever it is does not seem to take account of virtual packages correctly.
I've been running a simulated removal using dak itself, as documented here: https://wiki.debian.org/ftpmaster_Removals#Before_requesting_removal Which I suppose also means that ftp.debian.org removals might leave packages behind? > While I agree it's good to move away from crates that are abandoned upstream, > I think it's too late to do so for bookworm and I don't think any of these > crates are sensitive enough to consider such maintenance issues as rc. Sure, that's fair enough, of course. I filed those bugs under the assumption that these already were without rdeps. Cheers, Moritz
