3.12 Use dependencies sparingly and maintain them
Regularly review dependencies, remove unused or unnecessary libraries and frameworks, and keep required packages up to date. Opt for minimal, secure, and modular solutions.
Success Criteria
- Dependency management:
Review dependencies regularly and remove unused libraries and frameworks. Uninstall packages that are not needed. - Dependency necessity:
Limit the use of external libraries and frameworks to what is necessary, as this reduces the amount of code that must be downloaded and parsed by the browser. Prioritize plain code where possible. Review package size and evaluate whether individual modules can be imported instead of entire libraries, or whether a more performant alternative can be used. Do not replace established and trusted security libraries with custom implementations, as this increases vulnerability and can negatively impact sustainability. - Dependency updates:
Keep all dependencies up to date through regular review and maintenance.