On Friday, 9 January 2026 8:27:08 am Australian Eastern Daylight Time Bastien 
Roucaries wrote:
> You vendor about 830kb of go package
> 
> This should be avoided and you should use packaged go package in order to
> ease security support

I disagree strongly. It is a necessary tradeoff to allow backporting.

If package is not buildable in "stable" due to lack of some (non-backported)
Golang dependency, then we may not be able to upload fixes for something
much more important than optional Golang agent2 component.

I will downgrade severity of this issues.

-- 
Regards,
 Dmitry Smirnov
 GPG key : 4096R/52B6BBD953968D1B

---

Today, all statism is based entirely upon the assumption that people can
delegate rights they don't have.
 -- Larken Rose, The Most Dangerous Superstition

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to