Dependencies go below the url/version/checksum portion