TODO: add acceptance criteria for major items, such as dependency check, static analysis, and secrets storage.