Vetting of dependencies to ensure they are from where they say they are.