dependency management tools ci/cd risk