diff --git a/Cargo.lock b/Cargo.lock
index 9f88d937..482ca7b3 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -8580,11 +8580,9 @@ dependencies = [
  "csaf-walker",
  "cve",
  "git2",
- "hex",
  "humantime",
  "humantime-serde",
  "json-merge-patch",
- "jsonpath-rust",
  "log",
  "osv",
  "parking_lot 0.12.3",
@@ -8653,7 +8651,6 @@ dependencies = [
  "serde-cyclonedx",
  "serde_json",
  "serde_yml",
- "spdx",
  "spdx-expression",
  "spdx-rs",
  "strum 0.26.3",
diff --git a/modules/analysis/Cargo.toml b/modules/analysis/Cargo.toml
index e07fe2d5..0b2f1acd 100644
--- a/modules/analysis/Cargo.toml
+++ b/modules/analysis/Cargo.toml
@@ -20,7 +20,6 @@ sea-orm = { workspace = true }
 sea-query = { workspace = true }
 serde = { workspace = true }
 thiserror = { workspace = true }
-tokio = { workspace = true, features = ["full"] }
 tracing = { workspace = true }
 utoipa = { workspace = true, features = ["actix_extras", "uuid"] }
 utoipa-actix-web = { workspace = true }
@@ -41,6 +40,7 @@ sha2 = { workspace = true }
 test-context = { workspace = true }
 test-log = { workspace = true, features = ["log", "trace"] }
 tokio-util = { workspace = true, features = ["full"] }
+tokio = { workspace = true, features = ["full"] }
 trustify-test-context = { workspace = true }
 urlencoding = { workspace = true }
 criterion = { workspace = true, features = ["html_reports", "async_tokio"] }
diff --git a/modules/importer/Cargo.toml b/modules/importer/Cargo.toml
index b4160104..aca29787 100644
--- a/modules/importer/Cargo.toml
+++ b/modules/importer/Cargo.toml
@@ -18,11 +18,9 @@ csaf = { workspace = true }
 csaf-walker = { workspace = true, features = ["crypto-openssl", "csaf"] }
 cve = { workspace = true }
 git2 = { workspace = true }
-hex = { workspace = true }
 humantime = { workspace = true }
 humantime-serde = { workspace = true }
 json-merge-patch = { workspace = true }
-jsonpath-rust = { workspace = true }
 log = { workspace = true }
 osv = { workspace = true, features = ["schema"] }
 parking_lot = { workspace = true }
diff --git a/modules/ingestor/Cargo.toml b/modules/ingestor/Cargo.toml
index 2dda0104..88af479d 100644
--- a/modules/ingestor/Cargo.toml
+++ b/modules/ingestor/Cargo.toml
@@ -38,7 +38,6 @@ serde = { workspace = true, features = ["derive"] }
 serde-cyclonedx = { workspace = true }
 serde_json = { workspace = true }
 serde_yml = { workspace = true }
-spdx = { workspace = true }
 spdx-expression = { workspace = true }
 spdx-rs = { workspace = true }
 strum = { workspace = true }
diff --git a/modules/user/Cargo.toml b/modules/user/Cargo.toml
index 9da0ded2..7e471171 100644
--- a/modules/user/Cargo.toml
+++ b/modules/user/Cargo.toml
@@ -11,7 +11,6 @@ trustify-common = { workspace = true }
 trustify-entity = { workspace = true }
 
 actix-web = { workspace = true }
-anyhow = { workspace = true }
 sea-orm = { workspace = true, features = ["sea-query-binder", "sqlx-postgres", "runtime-tokio-rustls", "macros", "debug-print"] }
 sea-query = { workspace = true }
 serde_json = { workspace = true }
@@ -23,6 +22,7 @@ utoipa-actix-web = { workspace = true }
 trustify-test-context = { workspace = true }
 
 actix-http = { workspace = true }
+anyhow = { workspace = true }
 test-context = { workspace = true }
 test-log = { workspace = true, features = ["log", "trace"] }
 tokio = { workspace = true, features = ["full"] }