If you want to make something from scratch, you must first invent the universe.

Anyway, I wouldn't count the kind of simple, focused libraries dependencies Widdler relies on as additional LOC.

As a rule of thumb, if it's something that wouldn't make me blink an eye if I found it was in the python stdlib, it gets a pass from me. Only the webdav library might not fit this.

This is subjective, of course. If anyone has a better heuristic for this, I'm all ears.

There are only native packages + 1 external packages suah.dev/protect.

Looks like the package in question only has packages from the Go project itself.

The only external dependency is OpenBSD specific and used on that operating system only.