bower dependencies are not checked by lockdown. :open_mouth: