fail on bogus dependencies rather than warn