Hacker News Reader

Nowadays there are build tools that can determine dependencies automatically, by running the compilers inside a sandbox (e.g. linux strace).

strace? I was under the impression strace is used to monitor system calls, how does this related to compilers inside a sandbox?

It's not technically a sandbox, but monitoring syscalls is very closely related.