MbedTLS requires cmake for install, can it be avoided?

I’m running a Julia HTTP application in a container, and I noticed that installing MbedTLS required me to install cmake, g++, etc in order to build something. I understand that binary dependencies are ideally satisfied by jll packages, and indeed there’s an MbedTLS_jll package available. So what exactly is going on here? I would rather not need to add build tools in my container, so how can I track down where this dependency is coming from, and is this goal reasonable in the first place?