@bagder Since I had to build some SBOMs lately, I can tell that zlib is everywhere (including the linux kernel). In a typical configuration of curl and sqlite, zlib is a dependency, and it can also be a dependency to OpenSSL (although I think it is more esoteric configuration, not sure), but I'd estimate it has to be zlib by a large margin.
werschweinchen@mountains.social
@werschweinchen@mountains.social