Perlimports

Reducing software dependencies is one way to reduce an application’s attack surface. I’ve laid out how perlimports can be used to manage and reduce Perl dependencies in both modern and legacy applications. It’s not difficult, but it should be done with care.

I’ve been using perlimports a lot at $work. I’m generally quite happy with it, but perlimports can get confused by modules which are being dynamically used. Let’s look at an interesting strategy to fix this.

I was working on some Perl code which included a function whose origin was not obvious. Here’s how I used perlimports to figure it out.