"pkg audit" warns that curl needs to be upgraded. OK.
# pkg upgrade curl
Updating FreeBSD repository catalogue...
FreeBSD repository is up-to-date.
All repositories are up-to-date.
The following 3 package(s) will be affected (of 0 checked):
New packages to be INSTALLED:
perl5.20: 5.20.3_15 [ <=== Why? ]
Installed packages to be UPGRADED:
curl: 7.51.0 -> 7.51.0_5
Number of packages to be installed: 2
Checking dependencies of curl:
# pkg query %dn curl
# pkg rquery %dn curl
so that explains installing libnghttp2.
# pkg rquery %dn libnghttp2
# pkg rquery %dn ca_root_nss
(nothing, as expected)
# pkg rquery %rn perl5.20
So why does pkg want to install the ancient/outdated perl5.20?
It's not the first time I've seen pkg do this sort of thing.
I wish there were a "pkg upgrade --explainyourself" switch. :-/