Rename lockfile sources to dependencies

... and various other "source" => "dependency" renamings