Libraries as pure functions where ever possible and a build system that does not only enforce this but warns you when an update introduces a new/changed syscall

Libraries as pure functions where ever possible and a build system that does not only enforce this but warns you when an update introduces a new/changed syscall. Yes please! I know its not exactly low-dependency but at least lower attack surface.