application dependency security