See https://github.com/containers/skopeo/pull/2112/files : adding a call to util.ReadPassword triggers addition of several other unnecessary subpackages. (I am starting to think that a util subpackage is always a mistake because it will become a dependency magnet like this, caller of one small thing accrues several other unwanted dependencies.)
This is, of course, quite low-priority.