How do you make sure the dependencies the tool itself uses are sane to use?