We already have tools that handle this for us for OSS libraries, such as dependabot etc. Good factoring can probably be quantified too: dependency chains shoul

We already have tools that handle this for us for OSS libraries, such as dependabot etc. Good factoring can probably be quantified too: dependency chains should be shallow and graph connectivity should be low. The more dependants a module has, the more stable its API contract should be.