Bootstraps a project's dependencies for you. Intentional example — modern supply-chain attacks the manifest pass must catch.