I think writes should go to a temporary file, and the existing deps file (if any) should be replaced only if the temporary file is different. That way the timestamp of the deps file won't be changed if the dependencies are identical.