Hello, I reviewed the case of mp3gain. Upstream development is dead (last release in 2009). The package is only in wheezy, it's gone from jessie and newer releases. The package is not used by any LTS sponsor.
Thus I believe that the best course of action is to not spend any time on it and to mark the package as unsupported in debian-security-support. If anyone disagrees, please let me know. Cheers, -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: https://www.freexian.com/services/debian-lts.html Learn to master Debian: https://debian-handbook.info/get/
