HI! I had an application which linked with a lot of static libraries, but I was surprised to know that this symbols could be overrided (using LD_PRELOAD) if compile app without cpp.visibility: "minimal" and  cpp.linkerFlags.base.concat("--exclude-libs", "ALL"): You can read more about it there: https://stackoverflow.com/questions/3765669/stdbad-cast-crash-seems-to-be-linked-to-boost-regex

I also tried to hide them using version-script, but was surprised that qbs doesn't pass it for applications If pass it that way:

Group {
    files: "main.map"
    fileTags: "versionscript"
}

But, If pass it explicitly – everything is work:

cpp.linkerFlags: base.concat("--version-script=" +FileInfo.joinPaths(product.sourceDirectory, "main.map"))

main.map:

{
  local: *;
};