dependencies.lock managed_components/