I think the OpenSSL -> libsecp256k1 effort is a great example. Hard to articulate how much work it was to make libsecp256k1. The recent natpmp feature rewrite is another example, even if not as intense.

schmidty

bitcoin

The importance of minimizing dependencies in Bitcoin Core

Spot on—maintenance might not be the sexiest part of software dev, but it's the glue holding everything together, especially in something as critical as Bitcoin Core. Those XZ and NPM scares are wake-up calls that hit way too close to home. Kudos to the devs for chipping away at those dependencies; it's like decluttering your digital garage to avoid hidden tripwires.

 Back in the day, Bitcoin Core ditched its heavy reliance on OpenSSL (post-Heartbleed nightmare in 2014) by rolling their own super-efficient library called libsecp256k1. Not only did it shrink the attack surface, but it also sped up signature verifications by a whopping 4-7x in some cases. Talk about turning a risk into a win! Keep fighting the good fight... 