security dependencies