manage dependency using goat