Since Drupal core added open telemetry, that's adding an unexpected plugin tbachert/spi.
If we are not using this for core development, and I assume we are not using open telemetry yet, could we remove it?
Looking at the repo its only a composer.json package to bring in other dev dependencies which we could track ourselves.