Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

x/pkgsite: package removal request for https://pkg.go.dev/github.com/Ayanrajpoot10/bughunter-go #70624

Closed
Ayanrajpoot10 opened this issue Dec 1, 2024 · 13 comments
Assignees
Labels
pkgsite/package-removal Issues for package removal. See https://pkg.go.dev/about#removing-a-package pkgsite
Milestone

Comments

@Ayanrajpoot10
Copy link

Please remove the package https://pkg.go.dev/github.com/Ayanrajpoot10/bughunter-go from pkg.go.dev.

The package is no longer maintained, and I would like to request its removal from the Go module registry to prevent further usage or confusion among developers. Let me know if any additional steps or information are required to process this request.

Thank you for your assistance!

@gopherbot gopherbot added this to the Unreleased milestone Dec 1, 2024
@seankhliao seankhliao added the pkgsite/package-removal Issues for package removal. See https://pkg.go.dev/about#removing-a-package label Dec 1, 2024
@seankhliao
Copy link
Member

We expect this to be handled by the module publishing a retraction.

@Ayanrajpoot10
Copy link
Author

explain me what i need to do

@Ayanrajpoot10
Copy link
Author

I appreciate that the module has been marked as retracted. However, I would like to request the complete removal of the module github.com/Ayanrajpoot10/bughunter-go from proxy.golang.org and pkg.go.dev.

The reason for this request is that even though the module is retracted, users can still manually install specific versions, which I want to prevent entirely. I no longer maintain this module, and its continued availability may cause confusion or issues for users.

Please assist in permanently removing this module. Let me know if any further steps are required from my end.

image

@seankhliao
Copy link
Member

requesting a removal only hides the documentation, it will not prevent users from using the module.

@Ayanrajpoot10
Copy link
Author

I understand that removal will only hide the documentation. However, my goal is to completely prevent the public use of this tool. I had already deleted the repository earlier but had to recreate it temporarily just to retract the versions.

Now that the module is retracted, I kindly request the complete removal of this package so that users cannot install it using go install. Allowing continued installation, even with retraction warnings, defeats the purpose of my deprecation.

I hope this explanation clarifies my intent. Please assist in fully removing the module from proxy.golang.org, pkg.go.dev and preventing further installations.

Thank you for your understanding and support.

@ansaba
Copy link

ansaba commented Dec 3, 2024

As the owner wants to hide documentation for all current and future versions, accepting the pkg removal request.

@ansaba ansaba self-assigned this Dec 3, 2024
@adonovan
Copy link
Member

adonovan commented Dec 6, 2024

To be clear, removing the documentation from pkgsite will not affect the behavior of the go command.

@Ayanrajpoot10
Copy link
Author

To be clear, removing the documentation from pkgsite will not affect the behavior of the go command.

Understood, but could you clarify how I can stop the installation of my package if needed?

@findleyr
Copy link
Member

findleyr commented Dec 9, 2024

@Ayanrajpoot10 the package has now been excluded from pkg.go.dev, and your module retraction means it will not be listed by the Go command, and users will get a warning when fetching the module with go get.

If the module was published with a redistributable license, there is no easy way to just remove it from the proxy. Part of the purpose of the proxy is to prevent builds breaking when a module version disappears. Is the current state sufficient for your concerns? (No documentation on pkg.go.dev, no listing of module versions, and warning for any explicit usage)

@Ayanrajpoot10
Copy link
Author

Is it possible to ensure that my package cannot be installed via the go install command at all?

@findleyr
Copy link
Member

@Ayanrajpoot10 if the module was published with a redistributable license, the proxy will continue to serve it. Part of the functionality the proxy provides is to prevent existing builds from breaking in the future.

With that said, this really only applies to builds that already depended on this module. The module retraction will prevent the go command from adding it to new builds, unless the user manually types out the module path and version explicitly.

@findleyr
Copy link
Member

Thanks all, closing this as complete.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
pkgsite/package-removal Issues for package removal. See https://pkg.go.dev/about#removing-a-package pkgsite
Projects
None yet
Development

No branches or pull requests

6 participants