ability to clean up local repository

it's probably not too heavy to touch some metadata (or update a single file in the repository) for each dependency that is used (not downloaded, but actually used). It would only be needed once per dep per session.

With that information, a tool could easily remove files from the local repository not used in X days so they can be downloaded again later.