Package: golang-github-aead-chacha20 Severity: serious Hi! This package's upstream https://github.com/aead/chacha20 was archived in 2023 and as security-sensitive, we shouldn't be shipping this in forky. Consider removing this package from the archive.
The reverse dependency golang-github-jedisct1-xsecretbox incorrectly depended on this package, it was long migrated to use normal Go crypto library in the upstream. I'm making an upload to drop the no longer needed dependencies. /Simon
signature.asc
Description: PGP signature
_______________________________________________ Pkg-go-maintainers mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-go-maintainers
