A bit more detail for the dependency-management spec