Dependency Management Guide

Dependency Philosophy

Dependencies are a liability, not just an asset. Every dependency you add:

• Increases attack surface
• Adds maintenance burden
• Creates potential for breaking changes
• Requires trust in maintainers

"The best dependency is no dependency. The second best is one that's well-maintained, widely used, and actively developed."

Evaluation Criteria

Before adding a dependency, check: