dependency resolution for software