dependency is package based not file based