What is Dependency?

Any third-party package your project relies on — direct ones you import, and transitive ones your dependencies import. Dependency management is choosing them deliberately, pinning versions and keeping them (and your attack surface) up to date.