There's been a thread about dependencies lately and the challenge of convincing developers to look at the full dependency chain.
I once maintained a C++ binary that included a PostScript interpreter, a JPEG decoder, a JavaScript interpreter, and a number of other utterly irrelevant pieces causing a huge factor increase in the size of the binary.
The culprit: A single logging statement that invoked a general-purpose printer that could print web stuff. Switching to sprintf fixed it.
@robpike I once found an app had added the pyICU(i18n/l10n) package just to convert european-style floats (3,142) to US/UK style (3.142) in a single line in the codebase.