048 – Components with minimal dependencies

Summary

The components in the source code must have as few dependencies as possible.

Description

Having as few dependencies as possible is about being mindful of the dependencies that are introduced. It's a balance between modularity, simplicity, and flexibility that contributes to a more maintainable code over time.

Supported In

Essential: True

Advanced: True

References

• NISTSSDF-PW_4_1. Reuse existing, well-secured software when feasible instead of duplicating functionality
• OSAMM-SA. Security Architecture

Weaknesses

• 393 – Use of software with known vulnerabilities in development
• 410 – Dependency Confusion

Last updated

2024/02/09