thoughts on dependency management