fn build_dep( dep: &Dependency, ws: &Workspace<'_>, ret: &mut HashMap<String, SourceId>, visited: &mut HashSet<SourceId> )