Jacob Bachmeyer wrote: > some of the blame for this needs to fall on the > systemd maintainers and their "katamari" architecture. There is no good > reason for notifications of daemon startup to pull in liblzma, but using > libsystemd for that purpose does exactly that, and ended up getting > xz-utils targeted as a means of getting to sshd without the OpenSSH > maintainers noticing.
The systemd people are working on reducing the libsystemd dependencies: https://github.com/systemd/systemd/issues/32028 However, the question remains unanswered why it needs 3 different compression libraries (liblzma, libzstd, and liblz4). Why would one not suffice?
