What is Dependency? — UK Software Development Guide
Direct Answer
A software dependency is a library, package, or module that a software project relies on to function. Modern software projects may have hundreds of direct and transitive (indirect) dependencies. Package managers (npm for JavaScript, pip for Python, Maven for Java) manage these dependencies and their versions.
Dependency in the UK
Software dependencies are one of the biggest UK Cyber Essentials compliance challenges. The Patch Management control requires high-risk vulnerabilities to be patched within 14 days — but the 2024 npm ecosystem has had vulnerabilities in widely-used packages discovered daily. ClickMasters's approach: automated dependency scanning (Dependabot on GitHub) creates PRs for vulnerable dependencies; CI/CD pipeline enforces that builds with known high-severity CVEs fail; monthly manual review of all dependency updates. UK GDPR Article 32: outdated dependencies with known security vulnerabilities are an "inappropriate technical measure" — the ICO has cited unpatched systems in enforcement decisions.
Related Glossary Terms
UK GDPR
UK GDPR explained for UK software developers and business owners. UK GDPR (UK General Data Protection Regulation) is the post-Brexit version of EU GDPR, retained into UK law via the Euro... UK context, examples, and related services.
Cyber Essentials
Cyber Essentials explained for UK software developers and business owners. Cyber Essentials is a UK government-backed cybersecurity certification scheme developed by NCSC (National Cyber Security... UK context, examples, and related services.
Dtac
DTAC explained for UK software developers and business owners. DTAC (Digital Technology Assessment Criteria) is the NHS's mandatory assessment framework for digital health technologie... UK context, examples, and related services.
DEVOPS
DevOps explained for UK software developers and business owners. DevOps is a set of practices, principles, and culture that combines software development (Dev) and IT operations (Ops) t... UK context, examples, and related services.
Penetration-testing
Penetration Testing explained for UK software developers. Penetration testing (pen testing) is a simulated cyber attack against a software system, network, or application to disc... UK context and related services.
Kubernetes
Kubernetes explained for UK software developers. Kubernetes (commonly abbreviated as K8s) is an open-source container orchestration platform that automates the deploymen... UK context and related services.
Get Expert Advice on Dependency
Speak with our UK software development experts about Dependency. Free consultation, transparent pricing, no obligation.