Managing third-party dependencies