Hi Simon, (cc'ed David) Thanks for finding this and filing a bug.
This package is used by another package called `imaginary`: https://salsa.debian.org/go-team/packages/imaginary/-/blob/debian/sid/debian/patches/debian/0001-imaginary-throttled-package-update.patch If you search the Go import paths on https://pkg.go.dev, you can see their details on it's versioning and `go.mod` file: https://pkg.go.dev/gopkg.in/throttled/throttled.v2 https://pkg.go.dev/github.com/throttled/throttled/v2 This shows that `imaginary` needs `gopkg.in/throttled/throttled.v2`(which is version 2.2.5). It should not use `github.com/throttled/throttled/v2` with version (>> 2.2.5). So, we should fork and rename this package to `golang-gopkg-throttled-throttled.v2` to match its import path, and then update it to the latest version 2.2.5 instead of only removal it. After that, we can remove the hacks from `imaginary`. @David, could you please do the following? 1. Fork the repository under Go team namespace on salsa. 2. Rename the package and update vcs-tags to match its Go import path and new salsa repo path. 3. Update it to the latest version. 4. Remove your workaround patch from the `imaginary` package. I can review your MR and sponsor the upload. Best regards, -Andrew On Thu, Aug 27, 2026 at 9:23 AM Simon Josefsson <[email protected]> wrote: > > Package: golang-github-throttled-throttled > Severity: serious > Tags: sid forky > > This package ships upstream code (orig.tar) from 2019-12-20. It has no > reverse dependencies in Debian testing, see dak output at the end of > this e-mail. > > https://tracker.debian.org/pkg/golang-github-throttled-throttled > > Having golang-*-dev packages in testing, and consequently the next > stable release, has a QA cost. These packages normally have no use > for Debian users, but are intended for building other Debian packages > that rely on them. No package in Debian testing rely on this package. > > This bug is filed to trigger discussion if the package is still useful > to keep in Debian testing, and also (when no discussion occurs after > one week) trigger testing autoremoval of the package. > > Please don't take this as disrespect of the amount of work that went > into the upstream code, or its packaging -- this bug report is part of > a QA effort to remove 100+ unused golang-*-dev packages. The QA cost > associated with keeping all the packages in testing is assumed to be > larger than the cost to (hopefully rarely) have some discussion, > re-evaluation and closing of this bug report, if there is ever any > reasonable need to keep this package in testing. > > If you discover this bug report when doing QA work on this package, > please consider avoid doing any QA upload, and instead evaluate if the > package still has any use in Debian, and consider re-assigning this to > a ftp-master RM bug to finally trigger removal of it. > > /Simon > > ssh mirror.ftp-master.debian.org dak rm -Rn -s=testing > golang-github-throttled-throttled > Will remove the following packages from testing: > > golang-github-throttled-throttled | 2.2.4-3 | source > golang-github-throttled-throttled-dev | 2.2.4-3 | all > > Maintainer: Debian Go Packaging Team > <[email protected]> > > ------------------- Reason ------------------- > > ---------------------------------------------- > > Checking reverse dependencies... > No dependency problem found. -- -Andrew _______________________________________________ Pkg-go-maintainers mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-go-maintainers
