clean up dependencies and add threadfix as system scope
add threadfix dependency