koji/mash : resolving runtime dependency requirements