https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life is the process you need to follow. i have blocked the package

I am following it, that's why I created this ticket :) It's been replaced, not completely retired, so what I've done is:
retire the package (fedpkg retire)
create this ticket
* retire the package on koji

The rest don't apply since the package name remains libcacard, only now it's provided by the qemu package (see http://pkgs.fedoraproject.org/cgit/qemu.git/tree/qemu.spec#n600), and the next version is 1.3.0 > 1.2.2 so no need for Obsolete/Requires, and since the package isn't in comps.xml or in kickstarter spins no changes there.