Source: tokyotyrant tokyotyrant is a network server. It's upstream has vanished, and the last upstream release was in 2012 or earlier; that version is not packaged in Debian. The package is currently orphaned in Debian.
Should bullseye really ship with such a package? Also, it exposes tokyocabinet to the network, which itself is a rather old codebase, last updated in 2013. A successor, Tkrzw is actively maintained. Security team, maybe you also want to chime in here. I'll consider raising this bugs priority over time. Thanks for everyone's considerations, Chris

