If that package is needed by xorg-x11-Xvnc-novnc then it should be Required (either by xorg-x11-Xvnc-novnc or by python-websockify), i.e. not an YaST bug. If the dependency is really optional (there are use cases which work without that package) then we should add it to the package list in YaST. (https://github.com/yast/yast-network/blob/d7ce4f96be1314fb93e4cfd4e6659e9ee08b3cc6/src/lib/y2remote/modes/web.rb#L13) I'd avoid changing the recommends flags because that might have nasty side effects and AFAIK in AutoYaST profile you can enable/disable recommends and it could conflict with that setting.