moar dependency whitelisting