Datadog
Cut Linux Agent binaries by up to 77%
The Agent's artifacts nearly tripled in size, so the team audited imports and let the compiler drop 570 packages from one binary.
All case studies
Dependency Removal
5 case studies tagged dependency removal.
npm / event-stream
A package thousands of projects trusted changed hands
A popular package changed hands, and the code that arrived with the new maintainer took cryptocurrency wallets from the projects that installed it.
authentik
Removed Redis as a required dependency
The self-hosted identity provider moved sessions, caching, locks and WebSockets onto PostgreSQL, leaving customers one stateful service fewer to patch.
Chromium
Requires security approval to add a third-party library
A new dependency is not accepted on merit alone: the request has to say what it costs to build, ship, update and own for as long as it ships.
Shopify
Moved inventory reservations out of Redis into MySQL
Reservations and the inventory ledger lived in two systems, so the team put them in one database and dropped a cluster to maintain.