For now I can count two copies of zlib (libneocfzip and libneoicpng), one of libpng (libneoicpng), one of bzip2 (libneocfbzip2), one of jpeg (libneoicjpeg) and one of lua (libneolua), but I wouldn't be surprised if there were more.
Useful to note, zlib is zlib-1.2.1, which afair is vulnerable...
zlib, libpng, bzip2 and jpeg are removed. lua is too hard to remove as the one in is the 5.0 that is no more in the tree. Thanks
should leave it open for that one
neoengine punted from tree.