Stdlib or Third-Party? Empirical Performance and Correctness of LLM-Assisted Zero-Dependency Python Libraries
arXiv:2605.21405v1 Announce Type: cross Abstract: Third-party Python libraries introduce dependency management overhead, supply chain risk, and deployment friction in constrained environments. A natural question is how much of this ecosystem can be replicated using only Python's standard library -- and at what correctness and performance cost. We address this empirically through zerodep, a growing collection of single-file Python modules, each a stdlib-only reimplementation of a popular third-party library, developed with LLM assistance under strict constraints: no external imports, single fil
The proliferation of complex LLMs is enabling sophisticated code generation and refactoring, making it feasible to reconsider software dependencies and ecosystem structures.
Reducing third-party dependencies can significantly mitigate supply chain risks, improve deployment efficiency, and potentially redefine software development paradigms, particularly in sensitive environments.
The feasibility of creating robust, zero-dependency alternatives to popular libraries using LLM assistance challenges established software development practices and dependency management strategies.
- · Developers targeting constrained or secure environments
- · Organizations focused on software supply chain security
- · LLM developers and platforms
- · Python standard library creators
- · Certain third-party library maintainers
- · Dependency management tool providers
- · Organizations heavily reliant on large, unverified third-party ecosystems
Increased exploration and development of LLM-assisted code generation for security and efficiency.
A potential bifurcation in Python development: one path prioritizing feature-rich third-party libraries, another emphasizing 'zero-dependency' security and performance.
Enhanced supply chain resilience for software could become a competitive advantage, potentially influencing procurement and national security policies for critical infrastructure.
This signal links to a primary source. Continuum Brief monitors and indexes it as part of the live intelligence stream — we do not republish source content.
Read at arXiv cs.AI