Version 0.9.0-5 of gittuf is marked for autoremoval from testing on Tue 03 Jun 2025. It depends (transitively) on golang-mongodb-mongo-driver, affected by #1103117. You should try to prevent the removal by fixing these RC bugs.
Among the 3 debian patches
available in version 0.9.0-5 of the package,
we noticed the following issues:
1 patch
where the metadata indicates that the patch has not yet been forwarded
upstream. You should either forward the patch upstream or update the
metadata to document its real status.