HUMAN VERIFICATION REQUIRED ASVS 15.2.4 Dependency-confusion defense

Third-party components and all of their transitive dependencies are included from the expected repository, whether internally owned or an external source, and that there is no risk of a dependency confusion attack.