Serverside assurance that dependencies are only group, artifact, and version data.