A .NET Standard 2.1 library has a package reference to FxCop like so:
<PackageReference Include="Microsoft.CodeAnalysis.FxCopAnalyzers" Version="2.9.5">
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
</PackageReference>
A .NET Core 3.0 app references this Standard library. When I publish the app, several Microsoft.CodeAnalysis
dlls appear in the publish directory. They "shouldn't", but I don't know why they shouldn't so therefore I don't know how to tell them to not be there.
A recent question from ASP.NET has a similar problem, but I can't glean anything useful from it.