adding dependency check to vet security of 3rd party libs