I need to be able to whitelist AUR dependencies

Maybe even specific versions with a hashsum?