it's tracking dependency info