Dependency management in a multi-repository world