Verify `dependencies.json`

For now, we can only check for its structure. Ideally, we'd detect whether people are adding packages in there, but for that we'd have to download the current channel file for a list of all available dependencies.