Replace Outdated Dependencies with Built-in Go Functionality

[hj-johannes-lee]

Hi,

I’ve noticed that the first two dependencies of the cli package haven’t been updated and no longer maintained. For example, go-spew hasn't had updates for about 7 years. Considering that Go now has the v+ argument for printing structs, I’m wondering if this dependency is still necessary.

1. Are these outdated dependencies still required for cli?
2. Could these dependencies be replaced with built-in Go functionality, considering Go’s "evolution"?

Thanks.

[dearchap]

-@hj-johannes-lee go-spew isnt a direct dependency. The dependency is due to the testify library. We have no plans to replace testify.

 github.com/stretchr/[email protected] github.com/davecgh/[email protected]

We made an effort to remove all dependencies from v3. As you can see from go.mod v3 has only one dependency(testify). v2 we dont have any plans to rework unless there is a security issue.

[eero-t]

Browsing through testify repo tickets, shows two open tickets on unmaintained deps:

• Possible to remove go-spew? stretchr/testify#1061
• Find an alternative for go-difflib stretchr/testify#1159

(And several similar ones, closed as not-planned, with comments that they are kept until there's some known security exploit.)

Perhaps commenting / adding thumb-ups on those tickets would have some impact...

[dearchap]

@eero-t Did that . Thanks.