I noticed today that when installing the openssl package in msys2, it installed mingw-w64-x86_64-openssl instead of mingw-w64-ucrt-x86_64-openssl. This is a pretty nasty problem, as the MSys2 libraries (which have no prefix) do not use the modern windows CRT and instead use the (very, very old) visual studio 6.0 C runtime, which has a bunch of bugs and introduces weird potential errors like heap allocation errors on systems where ASLR/PIE/PIC is used. I think the strategy that should be used is something like this: if on windows and a system package is required, always prefer the ucrt version unless it doesn't exist, and only then fallback to possible alternatives.