refactor duo#dependency to have the signature dependency(dep, file, entry)