This package ships upstream code (orig.tar) from 2019-12-20.  It has no
reverse dependencies in Debian testing, see dak output at the end of
this e-mail.

https://tracker.debian.org/pkg/golang-github-throttled-throttled

Having golang-*-dev packages in testing, and consequently the next
stable release, has a QA cost.  These packages normally have no use
for Debian users, but are intended for building other Debian packages
that rely on them.  No package in Debian testing rely on this package.

This bug is filed to trigger discussion if the package is still useful
to keep in Debian testing, and also (when no discussion occurs after
one week) trigger testing autoremoval of the package.

Please don't take this as disrespect of the amount of work that went
into the upstream code, or its packaging -- this bug report is part of
a QA effort to remove 100+ unused golang-*-dev packages.  The QA cost
associated with keeping all the packages in testing is assumed to be
larger than the cost to (hopefully rarely) have some discussion,
re-evaluation and closing of this bug report, if there is ever any
reasonable need to keep this package in testing.

If you discover this bug report when doing QA work on this package,
please consider avoid doing any QA upload, and instead evaluate if the
package still has any use in Debian, and consider re-assigning this to
a ftp-master RM bug to finally trigger removal of it.

/Simon

ssh mirror.ftp-master.debian.org dak rm -Rn -s=testing golang-github-throttled-throttled
Will remove the following packages from testing:

golang-github-throttled-throttled |    2.2.4-3 | source
golang-github-throttled-throttled-dev |    2.2.4-3 | all

Maintainer: Debian Go Packaging Team <pkg-go-maintainers@lists.alioth.debian.org>
------------------- Reason -------------------

----------------------------------------------

Checking reverse dependencies...
No dependency problem found.

Hi Simon, (cc'ed David)

Thanks for finding this and filing a bug.

This package is used by another package called `imaginary`:
https://salsa.debian.org/go-team/packages/imaginary/-/blob/debian/sid/debian/patches/debian/0001-imaginary-throttled-package-update.patch

If you search the Go import paths on https://pkg.go.dev, you can see
their details on it's versioning and `go.mod` file:
https://pkg.go.dev/gopkg.in/throttled/throttled.v2
https://pkg.go.dev/github.com/throttled/throttled/v2

This shows that `imaginary` needs
`gopkg.in/throttled/throttled.v2`(which is version 2.2.5). It should
not use `github.com/throttled/throttled/v2` with version (>> 2.2.5).

So, we should fork and rename this package to
`golang-gopkg-throttled-throttled.v2` to match its import path, and
then update it to the latest version 2.2.5 instead of only removal it.
After that, we can remove the hacks from `imaginary`.

@David, could you please do the following?

1. Fork the repository under Go team namespace on salsa.
2. Rename the package and update vcs-tags to match its Go import path
and new salsa repo path.
3. Update it to the latest version.
4. Remove your workaround patch from the `imaginary` package.

I can review your MR and sponsor the upload.

Best regards,
-Andrew

Hi

Sounds like a good plan.  I'm happy to help with the new properly named
package if needs to.

However maybe we actually don't need to remove this package nor add a
new one.  We could just bump 'golang-github-throttled-throttled' to
latest v2 upstream and close this bug.  So many packages in Debian uses

In theory, shouldn't the "proper" package name be

   golang-github-throttled-throttled-v2

?

The upstream go.mod import path is github.com/throttled/throttled/v2
according to:

https://github.com/throttled/throttled/blob/master/go.mod
https://github.com/throttled/throttled/blob/v2.15.0/go.mod

The README on

https://pkg.go.dev/gopkg.in/throttled/throttled.v2#section-readme

says:

   Installation
   go get -u github.com/throttled/throttled

So I think imaginary should be using the recommended import path of
github.com/throttled/throttled and thus the Debian package
should follow that naming.

I may be mistaken, of course, the naming rules are a bit complex...

/Simon

tor 2026-08-27 klockan 11:37 +0200 skrev Andrew Lee:

Hi Simon,

Yes, and no. :)

The latest `imaginary` version `1.2.4` is using
`gopkg.in/throttled/throttled.v2 v2.0.3`.

See this from:
https://github.com/h2non/imaginary/blob/v1.2.4/go.mod

Unless we packaging the latest git HEAD that is using
`github.com/throttled/throttled/v2 v2.15.0`.

See this from:
https://github.com/h2non/imaginary/blob/master/go.mod

But this should be decided by maintainer with more tests.

Best regards,