Skip to content

Conversation

@alecsammon
Copy link
Contributor

@alecsammon alecsammon commented Aug 5, 2025

This library depends on https://github.com/go-kit/kit.
It looks to only use this for this single package: https://github.com/go-kit/kit/blob/master/metrics/discard/discard.go

Although the usage of this package is safe, the go-kit library hasn't been maintained since 2023 - and is throwing some warnings in our security scanning.

Can we look at removing usage of this external library?

The proposed PR replaces it with an internal interface - but also allows configuration via a config options.

Alternatively it could maybe be dropped completely? It's only a no-op.

@alecsammon alecsammon marked this pull request as ready for review August 5, 2025 09:46
@timsehn
Copy link
Contributor

timsehn commented Aug 8, 2025

Thanks for the contribution. @fulghum will look at this today.

Copy link
Contributor

@fulghum fulghum left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the contribution @alecsammon! 🙏 Always nice to drop a dependency, especially one that is not actively maintained.

@fulghum fulghum merged commit 694b316 into dolthub:main Aug 8, 2025
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants