This package ships upstream code from 2014.  It has no reverse
dependencies in Debian testing, see dak output at the end of this
e-mail.

https://tracker.debian.org/pkg/golang-github-bgentry-go-netrc

Having golang-*-dev packages in testing, and consequently the next
stable release, has a QA cost.  These packages normally have no use
for Debian users, but are intended for building other Debian packages
that rely on them.  No package in Debian testing rely on this package.

This bug is filed to trigger discussion if the package is still useful
to keep in Debian testing, and also (when no discussion occurs after
one week) trigger testing autoremoval of the package.

Please don't take this as disrespect of the amount of work that went
into the upstream code, or its packaging -- this bug report is part of
a QA effort to remove 100+ unused golang-*-dev packages.  The QA cost
associated with keeping all the packages in testing is assumed to be
larger than the cost to (hopefully rarely) have some discussion,
re-evaluation and closing of this bug report, if there is ever any
reasonable need to keep this package in testing.

If you discover this bug report when doing QA work on this package,
please consider avoid doing any QA upload, and instead evaluate if the
package still has any use in Debian, and consider re-assigning this to
a ftp-master RM bug to finally trigger removal of it.

/Simon

ssh mirror.ftp-master.debian.org dak rm -Rn -s=testing golang-github-bgentry-go-netrc
Will remove the following packages from testing:

golang-github-bgentry-go-netrc | 0.0~git20140422.9fd32a8-1 | source
golang-github-bgentry-go-netrc-dev | 0.0~git20140422.9fd32a8-1 | all

Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
------------------- Reason -------------------

----------------------------------------------

Checking reverse dependencies...
No dependency problem found.

I am re-introducing go-getter (ITP https://bugs.debian.org/1148633) as a build
dependency of syft (ITP https://bugs.debian.org/1124819). It is not in the
archive yet, so your observation is correct as of today.

More relevant than that: the package ships no go.mod, and upstream has none
either, the code predating modules. The Go team is currently moving packages to
module-aware builds with dh-go, and under those dh-go generates a go.work with
a replace directive into this tree, so the build fails with

  reading src/github.com/bgentry/go-netrc/go.mod: no such file or directory

That is the Phase 1 requirement of
https://wiki.debian.org/Teams/DebianGoTeam/ModuleAwareBuilds. As it stands the
package cannot be used by the build system the team is migrating to, whoever
the consumer turns out to be.

Either outcome suits me. If it stays, I will prepare the go.mod upload; if the
team prefers removal, that is a fair call for 2014 code and I will handle
go-netrc inside go-getter instead. I have no wish to obstruct the QA sweep.

We believe that the bug you reported is fixed in the latest version of
golang-github-bgentry-go-netrc, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1145798@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Otto Kekäläinen <otto@debian.org> (supplier of updated golang-github-bgentry-go-netrc package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 22 Oct 2026 06:06:06 +0000
Source: golang-github-bgentry-go-netrc
Architecture: source
Version: 0.0~git20140422.9fd32a8-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Otto Kekäläinen <otto@debian.org>
Closes: 1145798
Changes:
 golang-github-bgentry-go-netrc (0.0~git20140422.9fd32a8-2) unstable; urgency=medium
 .
   * Team upload to maintain a package that is still has a purpose
     (Closes: #1145798)
 .
   [ Juan Manuel Méndez Rey ]
   * Add go.mod and switch to dh-go for module-aware builds
   * Override missing-build-dependency-for-dh-addon
   * Enable Salsa CI using the default template
 .
   [ Otto Kekäläinen ]
   * Apply consistent formatting to packaging files
   * Drop redundant `Priority: optional`
   * Drop redundant `Rules-Requires-Root: no`
Checksums-Sha1:
 e40de7fdd6dd2bd75a9017e6327e289a31c2c64d 2404 golang-github-bgentry-go-netrc_0.0~git20140422.9fd32a8-2.dsc
 344c64222e433f775e14c8649094648df09688f7 3472 golang-github-bgentry-go-netrc_0.0~git20140422.9fd32a8-2.debian.tar.xz
 61cd0f24b79ce3656f8f0b4891bc7360697a701a 5419 golang-github-bgentry-go-netrc_0.0~git20140422.9fd32a8-2_source.buildinfo
Checksums-Sha256:
 bc02830f9a90465013879a8998639a8b469e797c987b4e2220446c7a9b0a28d0 2404 golang-github-bgentry-go-netrc_0.0~git20140422.9fd32a8-2.dsc
 1ce093c81ed7b021c1926f50b0a084f74b807aadf4b2cca3b963813e76ccd49d 3472 golang-github-bgentry-go-netrc_0.0~git20140422.9fd32a8-2.debian.tar.xz
 9e21c8e8611db39e66b2354932bb5b780096fe3e56d295796b3b916b1fbc8010 5419 golang-github-bgentry-go-netrc_0.0~git20140422.9fd32a8-2_source.buildinfo
Files:
 f47355f6f672f9c477d7bd5d9b4542ca 2404 golang optional golang-github-bgentry-go-netrc_0.0~git20140422.9fd32a8-2.dsc
 58d2e53d0ed947286397b6d79471808c 3472 golang optional golang-github-bgentry-go-netrc_0.0~git20140422.9fd32a8-2.debian.tar.xz
 d8661f3620cb5513de06dd66f89f187e 5419 golang optional golang-github-bgentry-go-netrc_0.0~git20140422.9fd32a8-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=oIlM
-----END PGP SIGNATURE-----