Keep in mind that curl is a foundational tool for fetching in some cases, so dependencies hurt more. I recently built a package on an old machine and had to remove psl because it didn't build, for what that's worth. It seems vastly complicated for what it is. This doesn't seem like a useful enough thing to add an option. Our normal reponse to 'package build finds something that was not a declared depennency is just to patch it out. Absent users/etc. saying "I need psl in curl and here's why", my view is to just skip it.
Attachment:
signature.asc
Description: PGP signature