the JDK could be a Recommends: instead of Depends: The JDK is needed for keytool. Now that default signing is provided by apksigner (its own package) rather than jarsigner (part of the JDK), the JDK is only needed to generate new signing keys, as far as I know.