They also didn't look at DLLs used by other DLLs.
This is like a back-of-the-envelope calculation. A quick first pass to get an order of magnitude.
If so, then the data is too wrong to be of any value.
However, ldd lists also indirect dependencies so I think this was already accounted for (though that might've been by accident):
~> readelf -d /bin/bash | grep NEEDED 0x0000000000000001 (NEEDED) Shared library: [libreadline.so.8] 0x0000000000000001 (NEEDED) Shared library: [libc.so.6] ~> ldd /bin/bash linux-vdso.so.1 (0x00007fff15191000) libreadline.so.8 => /lib64/libreadline.so.8 (0x00007f2a24818000) libc.so.6 => /lib64/libc.so.6 (0x00007f2a2460e000) libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007f2a245db000) /lib64/ld-linux-x86-64.so.2 (0x00007f2a249b1000)
They also didn't look at DLLs used by other DLLs.
This is like a back-of-the-envelope calculation. A quick first pass to get an order of magnitude.