public-health-ch/ansible/roles/dev-sec.os-hardening/tasks/apt.yml

---
- name: remove deprecated or insecure packages | package-01 - package-09
  apt:
    name: '{{ os_security_packages_list }}'
    state: 'absent'
    purge: 'yes'
  when: os_security_packages_clean | bool