[ledgersmb-devel] Setting a policy for our dependencies