It might be nice to autodetect all the projects, and then just whitelist the RHEL 5 ones by name. That way we don't have to remember to update this file whenever we add new deps unless they are for RHEL 5 (which is much less likely).