Enable dependency signature verification to make sure that used dependencies have not been tampered with. Follow https://developer.android.com/build/dependency-verification guide to do this.