ansible-collection-hardening/roles/os_hardening/tasks/apt.yml

---
- name: remove deprecated or insecure packages | package-01 - package-09
  apt:
    name: '{{ os_security_packages_list }}'
    state: 'absent'
    purge: 'yes'
  when: os_security_packages_clean | bool