Concern Regarding the rcrowley/go-metrics Dependency

[PaigeOmmen]

I noticed that there had been discussion in Sarama roadmap around the replacement of rcrowley/go-metrics with something like prometheus's Golang client. However, that conversation is nearly 4 years old and the rcrowley/go-metrics project remains generally unmaintained. So, I wanted to open a unique issue to bring attention to that particular concern. I understand that such a replacement of that dependency would introduce breaking changes to any projects leveraging those metrics, but I think upgrading Sarama's metric gathering component to depend on something with regular updates would benefit the project's security and integrability.

[RainbowMango]

+1 on replacement of rcrowley/go-metrics

[cjh-mastering]

+1 it seems that go-metrics may invoke memory leak problem, #1321