add method to return the dependency tree for a given Gem::Dependency
initial spike generating some checksums for Gemfile.lock