A dependency in software can be summarized to a checksum, a location, a name and a version.

The checksum checks the integrity, the location defines how to retrieve the dependency, the name identify the dependency and the version its substitutability (major with breaking changes, minor if it has new features or bug fixes).