Concern Regarding the rcrowley/go-metrics Dependency

[PaigeOmmen]

I noticed that there had been discussion in Sarama roadmap around the replacement of rcrowley/go-metrics with something like prometheus's Golang client. However, that conversation is nearly 4 years old and the rcrowley/go-metrics project remains generally unmaintained. So, I wanted to open a unique issue to bring attention to that particular concern. I understand that such a replacement of that dependency would introduce breaking changes to any projects leveraging those metrics, but I think upgrading Sarama's metric gathering component to depend on something with regular updates would benefit the project's security and integrability.

[RainbowMango]

+1 on replacement of rcrowley/go-metrics

[cjh-mastering]

+1 it seems that go-metrics may invoke memory leak problem, #1321

[github-actions]

Thank you for taking the time to raise this issue. However, it has not had any activity on it in the past 90 days and will be closed in 30 days if no updates occur.
Please check if the main branch has already resolved the issue since it was raised. If you believe the issue is still valid and you would like input from the maintainers then please comment to ask for it to be reviewed.