diff --git a/api/manage.py b/api/manage.py
index fed81fbe..28c4ca52 100755
--- a/api/manage.py
+++ b/api/manage.py
@@ -1,5 +1,6 @@
 #!/usr/bin/env python
 """Django's command-line utility for administrative tasks."""
+
 import os
 import sys
 
diff --git a/api/outdated/conftest.py b/api/outdated/conftest.py
index bf9be0d9..ac7c848a 100644
--- a/api/outdated/conftest.py
+++ b/api/outdated/conftest.py
@@ -22,6 +22,7 @@
 
 
 register(factories.DependencyFactory)
+register(factories.DependencySourceFactory)
 register(factories.VersionFactory)
 register(factories.ReleaseVersionFactory)
 register(factories.ProjectFactory)
diff --git a/api/outdated/oidc_auth/permissions.py b/api/outdated/oidc_auth/permissions.py
index 55f6e672..24cf747c 100644
--- a/api/outdated/oidc_auth/permissions.py
+++ b/api/outdated/oidc_auth/permissions.py
@@ -16,12 +16,10 @@ class Request(Protocol):  # pragma: no cover
     """Request protocol for permissions."""
 
     @property
-    def method(self) -> str:
-        ...
+    def method(self) -> str: ...
 
     @property
-    def user(self) -> None | OIDCUser:
-        ...
+    def user(self) -> None | OIDCUser: ...
 
 
 class ObjectPermissionIsHasPermission(BasePermission):
diff --git a/api/outdated/outdated/factories.py b/api/outdated/outdated/factories.py
index c2f0feff..5dafdd01 100644
--- a/api/outdated/outdated/factories.py
+++ b/api/outdated/outdated/factories.py
@@ -56,20 +56,30 @@ class ProjectFactory(DjangoModelFactory):
     repo = Sequence(lambda n: "github.com/userorcompany/%s/" % n)
     repo_type = "public"
 
+    class Meta:
+        model = models.Project
+
+
+class DependencySourceFactory(DjangoModelFactory):
+    project = SubFactory(ProjectFactory)
+    path = random.choice(
+        ["/pyproject.toml", "/api/pyproject.toml", "/ember/pnpm-lock.yaml"]
+    )
+
     @post_generation
-    def versioned_dependencies(self, create, extracted, **kwargs):
+    def versions(self, create, extracted, **kwargs):
         if not create:
             return  # pragma: no cover
         if extracted:
-            for versioned_dependency in extracted:
-                self.versioned_dependencies.add(versioned_dependency)
+            for version in extracted:
+                self.versions.add(version)
 
     class Meta:
-        model = models.Project
+        model = models.DependencySource
 
 
 class MaintainerFactory(DjangoModelFactory):
-    project = SubFactory(ProjectFactory)
+    source = SubFactory(DependencySourceFactory)
     user = SubFactory(UserFactory)
 
     class Meta:
diff --git a/api/outdated/outdated/migrations/0001_initial.py b/api/outdated/outdated/migrations/0001_initial.py
index 0e7dd6cb..6f811582 100644
--- a/api/outdated/outdated/migrations/0001_initial.py
+++ b/api/outdated/outdated/migrations/0001_initial.py
@@ -1,4 +1,4 @@
-# Generated by Django 4.2.6 on 2024-01-09 09:41
+# Generated by Django 5.0.3 on 2024-03-12 13:54
 
 import uuid
 
@@ -18,7 +18,7 @@ class Migration(migrations.Migration):
 
     operations = [
         migrations.CreateModel(
-            name="Dependency",
+            name="DependencySource",
             fields=[
                 (
                     "id",
@@ -29,17 +29,39 @@ class Migration(migrations.Migration):
                         serialize=False,
                     ),
                 ),
-                ("name", models.CharField(max_length=100)),
+                ("path", models.CharField()),
+            ],
+            options={
+                "abstract": False,
+            },
+        ),
+        migrations.CreateModel(
+            name="Project",
+            fields=[
                 (
-                    "provider",
+                    "id",
+                    models.UUIDField(
+                        default=uuid.uuid4,
+                        editable=False,
+                        primary_key=True,
+                        serialize=False,
+                    ),
+                ),
+                ("name", models.CharField(db_index=True, max_length=100)),
+                ("repo", outdated.models.RepositoryURLField(max_length=100)),
+                (
+                    "repo_type",
                     models.CharField(
-                        choices=[("PIP", "PIP"), ("NPM", "NPM")], max_length=10
+                        choices=[
+                            ("public", "public"),
+                            ("access-token", "access-token"),
+                        ],
+                        max_length=25,
                     ),
                 ),
             ],
             options={
                 "ordering": ["name", "id"],
-                "unique_together": {("name", "provider")},
             },
         ),
         migrations.CreateModel(
@@ -57,13 +79,6 @@ class Migration(migrations.Migration):
                 ("major_version", models.IntegerField()),
                 ("minor_version", models.IntegerField()),
                 ("end_of_life", models.DateField(blank=True, null=True)),
-                (
-                    "dependency",
-                    models.ForeignKey(
-                        on_delete=django.db.models.deletion.CASCADE,
-                        to="outdated.dependency",
-                    ),
-                ),
             ],
             options={
                 "ordering": [
@@ -72,7 +87,6 @@ class Migration(migrations.Migration):
                     "major_version",
                     "minor_version",
                 ],
-                "unique_together": {("dependency", "major_version", "minor_version")},
             },
         ),
         migrations.CreateModel(
@@ -89,13 +103,6 @@ class Migration(migrations.Migration):
                 ),
                 ("patch_version", models.IntegerField()),
                 ("release_date", models.DateField(blank=True, null=True)),
-                (
-                    "release_version",
-                    models.ForeignKey(
-                        on_delete=django.db.models.deletion.CASCADE,
-                        to="outdated.releaseversion",
-                    ),
-                ),
             ],
             options={
                 "ordering": [
@@ -105,11 +112,10 @@ class Migration(migrations.Migration):
                     "release_version__minor_version",
                     "patch_version",
                 ],
-                "unique_together": {("release_version", "patch_version")},
             },
         ),
         migrations.CreateModel(
-            name="Project",
+            name="Dependency",
             fields=[
                 (
                     "id",
@@ -120,25 +126,17 @@ class Migration(migrations.Migration):
                         serialize=False,
                     ),
                 ),
-                ("name", models.CharField(db_index=True, max_length=100)),
-                ("repo", outdated.models.RepositoryURLField(max_length=100)),
+                ("name", models.CharField(max_length=100)),
                 (
-                    "repo_type",
+                    "provider",
                     models.CharField(
-                        choices=[
-                            ("public", "public"),
-                            ("access-token", "access-token"),
-                        ],
-                        max_length=25,
+                        choices=[("PIP", "PIP"), ("NPM", "NPM")], max_length=10
                     ),
                 ),
-                (
-                    "versioned_dependencies",
-                    models.ManyToManyField(blank=True, to="outdated.version"),
-                ),
             ],
             options={
                 "ordering": ["name", "id"],
+                "unique_together": {("name", "provider")},
             },
         ),
         migrations.CreateModel(
@@ -155,11 +153,11 @@ class Migration(migrations.Migration):
                 ),
                 ("is_primary", outdated.models.UniqueBooleanField(default=False)),
                 (
-                    "project",
+                    "source",
                     models.ForeignKey(
                         on_delete=django.db.models.deletion.CASCADE,
                         related_name="maintainers",
-                        to="outdated.project",
+                        to="outdated.dependencysource",
                     ),
                 ),
                 (
@@ -184,8 +182,45 @@ class Migration(migrations.Migration):
                 name="unique_project_repo",
             ),
         ),
+        migrations.AddField(
+            model_name="dependencysource",
+            name="project",
+            field=models.ForeignKey(
+                on_delete=django.db.models.deletion.CASCADE,
+                related_name="sources",
+                to="outdated.project",
+            ),
+        ),
+        migrations.AddField(
+            model_name="releaseversion",
+            name="dependency",
+            field=models.ForeignKey(
+                on_delete=django.db.models.deletion.CASCADE, to="outdated.dependency"
+            ),
+        ),
+        migrations.AddField(
+            model_name="version",
+            name="release_version",
+            field=models.ForeignKey(
+                on_delete=django.db.models.deletion.CASCADE,
+                to="outdated.releaseversion",
+            ),
+        ),
+        migrations.AddField(
+            model_name="dependencysource",
+            name="versions",
+            field=models.ManyToManyField(blank=True, to="outdated.version"),
+        ),
         migrations.AlterUniqueTogether(
             name="maintainer",
-            unique_together={("user", "project")},
+            unique_together={("user", "source")},
+        ),
+        migrations.AlterUniqueTogether(
+            name="releaseversion",
+            unique_together={("dependency", "major_version", "minor_version")},
+        ),
+        migrations.AlterUniqueTogether(
+            name="version",
+            unique_together={("release_version", "patch_version")},
         ),
     ]
diff --git a/api/outdated/outdated/models.py b/api/outdated/outdated/models.py
index c954ca97..9dd9ed0a 100644
--- a/api/outdated/outdated/models.py
+++ b/api/outdated/outdated/models.py
@@ -124,8 +124,6 @@ def version(self) -> str:
 
 class Project(UUIDModel):
     name = models.CharField(max_length=100, db_index=True)
-
-    versioned_dependencies = models.ManyToManyField(Version, blank=True)
     repo = RepositoryURLField(max_length=100)
     repo_type = models.CharField(max_length=25, choices=REPO_TYPES)
 
@@ -208,21 +206,39 @@ class Meta:
 
     @property
     def status(self) -> str:
-        first = self.versioned_dependencies.first()
-        return first.release_version.status if first else STATUS_OPTIONS["undefined"]
+        if not (first := self.sources.first()):
+            return "UNDEFINED"
+        return (
+            first.versions.first().release_version.status
+            if first.versions.first()
+            else STATUS_OPTIONS["undefined"]
+        )
 
     def __str__(self):
         return self.name
 
 
+class DependencySource(UUIDModel):
+    path = models.CharField()
+    project = models.ForeignKey(
+        Project, on_delete=models.CASCADE, related_name="sources"
+    )
+    versions = models.ManyToManyField(Version, blank=True)
+
+    @property
+    def status(self) -> str:
+        first = self.versions.first()
+        return first.release_version.status if first else STATUS_OPTIONS["undefined"]
+
+
 class Maintainer(UUIDModel):
     user = models.ForeignKey(User, on_delete=models.CASCADE)
-    project = models.ForeignKey(
-        Project,
+    source = models.ForeignKey(
+        DependencySource,
         on_delete=models.CASCADE,
         related_name="maintainers",
     )
-    is_primary = UniqueBooleanField(default=False, together=["project"])
+    is_primary = UniqueBooleanField(default=False, together=["source"])
 
     class Meta:
-        unique_together = ("user", "project")
+        unique_together = ("user", "source")
diff --git a/api/outdated/outdated/parser.py b/api/outdated/outdated/parser.py
index 878c7f67..c310379f 100644
--- a/api/outdated/outdated/parser.py
+++ b/api/outdated/outdated/parser.py
@@ -21,7 +21,8 @@
 class LockfileParser:
     """Parse a lockfile and return a list of dependencies."""
 
-    def __init__(self, lockfiles: list[Path]) -> None:
+    def __init__(self, project: models.Project, lockfiles: list[Path]) -> None:
+        self.project = project
         self.lockfiles = lockfiles
 
     def _get_provider(self, name: str) -> str:
@@ -135,10 +136,8 @@ def _get_release_date(self, version: models.Version) -> date:
 
         return parse_date(release_date).date()
 
-    def parse(self) -> list[models.Version]:
-        """Parse the lockfile and return a dictionary of dependencies."""
-        versions = []
-
+    def parse(self) -> None:
+        """Parse the lockfile and create the DependencySources."""
         for lockfile in self.lockfiles:
             name = lockfile.name
             data = lockfile.read_text()
@@ -173,8 +172,9 @@ def parse(self) -> list[models.Version]:
                     and requirements[0][0] in settings.TRACKED_DEPENDENCIES
                 ]
 
-            versions.extend(
-                self._get_version(dependency, provider) for dependency in dependencies
+            source, _ = models.DependencySource.objects.get_or_create(
+                path=name, project=self.project
+            )
+            source.versions.set(
+                [self._get_version(dependency, provider) for dependency in dependencies]
             )
-
-        return versions
diff --git a/api/outdated/outdated/serializers.py b/api/outdated/outdated/serializers.py
index 24046ded..87d44ae6 100644
--- a/api/outdated/outdated/serializers.py
+++ b/api/outdated/outdated/serializers.py
@@ -49,7 +49,7 @@ class Meta:
 class MaintainerSerializer(serializers.ModelSerializer):
     included_serializers = {
         "user": "outdated.user.serializers.UserSerializer",
-        "project": "outdated.outdated.serializers.ProjectSerializer",
+        "source": "outdated.outdated.serializers.DependencySourceSerializer",
     }
 
     class Meta:
@@ -57,11 +57,27 @@ class Meta:
         fields = "__all__"
 
 
-class ProjectSerializer(serializers.ModelSerializer):
+class DependencySourceSerializer(serializers.ModelSerializer):
     maintainers = serializers.ResourceRelatedField(
         many=True,
         read_only=True,
-        required=False,
+    )
+
+    included_serializers = {
+        "project": "outdated.outdated.serializers.ProjectSerializer",
+        "versions": VersionSerializer,
+        "maintainers": MaintainerSerializer,
+    }
+
+    class Meta:
+        model = models.DependencySource
+        fields = "__all__"
+
+
+class ProjectSerializer(serializers.ModelSerializer):
+    sources = serializers.ResourceRelatedField(
+        many=True,
+        read_only=True,
     )
 
     access_token = serializers.CharField(
@@ -83,8 +99,7 @@ class ProjectSerializer(serializers.ModelSerializer):
     )
 
     included_serializers = {
-        "versioned_dependencies": "outdated.outdated.serializers.VersionSerializer",
-        "maintainers": "outdated.outdated.serializers.MaintainerSerializer",
+        "sources": DependencySourceSerializer,
     }
 
     class Meta:
@@ -100,8 +115,7 @@ class Meta:
             "repo_type",
             "access_token",
             "status",
-            "versioned_dependencies",
-            "maintainers",
+            "sources",
         )
 
     def create(self, validated_data: dict) -> models.Project:
diff --git a/api/outdated/outdated/tests/test_api.py b/api/outdated/outdated/tests/test_api.py
index 24a20d53..8fda36b1 100644
--- a/api/outdated/outdated/tests/test_api.py
+++ b/api/outdated/outdated/tests/test_api.py
@@ -120,10 +120,14 @@ def test_version(client, version_factory):
 
 
 @pytest.mark.parametrize("defined", [True, False])
-def test_project(client, project_factory, version_factory, defined):
-    generated_project = project_factory(
-        versioned_dependencies=[version_factory()] if defined else [],
+def test_project(
+    client, project_factory, dependency_source_factory, version_factory, defined
+):
+    generated_project = project_factory()
+    dependency_source_factory(
+        versions=[version_factory()] if defined else [], project=generated_project
     )
+
     url = reverse("project-list")
     resp = client.get(url)
     assert resp.status_code == http_status.HTTP_200_OK
@@ -152,20 +156,20 @@ def test_project(client, project_factory, version_factory, defined):
     )
     if defined:
         for gen_dep_version, resp_dep_version in zip(
-            resp_detailed.json()["data"]["relationships"]["versioned-dependencies"][
-                "data"
-            ],
-            generated_project.versioned_dependencies.all(),
+            resp_detailed.json()["data"]["relationships"]["sources"]["data"],
+            generated_project.sources.all(),
         ):
             assert gen_dep_version["id"] == str(resp_dep_version.id)
     else:
-        assert not generated_project.versioned_dependencies.first()
+        assert not generated_project.sources.first().versions.first()
+        assert generated_project.sources.first().status == "UNDEFINED"
         assert generated_project.status == "UNDEFINED"
 
 
 def test_project_ordered_by_eol(
     client,
     project_factory,
+    dependency_source_factory,
     release_version_factory,
     version_factory,
 ):
@@ -179,26 +183,23 @@ def test_project_ordered_by_eol(
         release_version=release_version_factory(up_to_date=True),
     )
 
-    project_last = project_factory(
-        name="A project",
-        versioned_dependencies=[up_to_date_version],
-    )
-    project_middle = project_factory(
-        name="B project",
-        versioned_dependencies=[warning_version],
-    )
-    project_first = project_factory(
-        name="C project",
-        versioned_dependencies=[outdated_version],
-    )
+    project_up_to_date = project_factory(name="A project")
+    dependency_source_factory(versions=[up_to_date_version], project=project_up_to_date)
+    project_warning = project_factory(name="B project")
+    dependency_source_factory(versions=[warning_version], project=project_warning)
+    project_outdated = project_factory(name="C project")
+    dependency_source_factory(versions=[outdated_version], project=project_outdated)
+    project_undefined = project_factory(name="D project")
 
     url = reverse("project-list")
     resp = client.get(url)
+    assert resp.status_code == http_status.HTTP_200_OK
     json = resp.json()
 
-    assert json["data"][0]["id"] == str(project_first.pk)
-    assert json["data"][1]["id"] == str(project_middle.pk)
-    assert json["data"][2]["id"] == str(project_last.pk)
+    assert json["data"][0]["id"] == str(project_outdated.pk)
+    assert json["data"][1]["id"] == str(project_warning.pk)
+    assert json["data"][2]["id"] == str(project_up_to_date.pk)
+    assert json["data"][3]["id"] == str(project_undefined.pk)
 
 
 def test_maintainer(client, maintainer):
@@ -216,15 +217,15 @@ def test_maintainer(client, maintainer):
         == str(maintainer.user.id)
     )
     assert (
-        relationships["project"]["data"]["id"]
-        == detailed_relationships["project"]["data"]["id"]
-        == str(maintainer.project.id)
+        relationships["source"]["data"]["id"]
+        == detailed_relationships["source"]["data"]["id"]
+        == str(maintainer.source.id)
     )
     assert (
         resp.json()["data"][0]["attributes"]
         == resp_detailed.json()["data"]["attributes"]
     )
-    assert maintainer.project.maintainers.all()[0] == maintainer
+    assert maintainer.source.maintainers.all()[0] == maintainer
 
 
 @pytest.mark.django_db(transaction=True)
diff --git a/api/outdated/outdated/tests/test_parser.py b/api/outdated/outdated/tests/test_parser.py
index e6eb4402..c017c6f9 100644
--- a/api/outdated/outdated/tests/test_parser.py
+++ b/api/outdated/outdated/tests/test_parser.py
@@ -7,6 +7,7 @@
 import pytest
 from requests import exceptions
 
+from outdated.outdated.models import Version
 from outdated.outdated.parser import LockfileParser
 from outdated.outdated.tracking import Tracker
 
@@ -127,12 +128,12 @@ def test_parser(db, tmp_repo_root, project, lockfile, content, expected):
     assert len(lockfiles) == 1
     assert lockfiles[0].name == lockfile
 
-    results = LockfileParser(lockfiles).parse()
+    LockfileParser(project, lockfiles).parse()
 
-    assert len(results) == len(expected)
+    assert len(project.sources.values_list("versions", flat=True)) == len(expected)
 
-    for result in results:
-        assert str(result) in expected
+    for result in project.sources.values_list("versions", flat=True):
+        assert str(Version.objects.get(id=result)) in expected
 
 
 @pytest.mark.django_db()
@@ -169,6 +170,7 @@ def test_fetch_end_of_life(
     associations: dict,
     call_count: int,
     requests_mock: Mocker,
+    project: models.Project,
 ) -> None:
     settings.ENDOFLIFE_DATE_ASSOCIATIONS = associations
     mocker.patch.object(
@@ -188,7 +190,9 @@ def test_fetch_end_of_life(
         },
     )
     for dependency_name in dependency_names:
-        LockfileParser([])._get_version((dependency_name, "4.4.1"), provider="PIP")  # noqa: SLF001
+        LockfileParser(project, [])._get_version(  # noqa: SLF001
+            (dependency_name, "4.4.1"), provider="PIP"
+        )
     assert get_end_of_life_date_spy.call_count == call_count
 
 
@@ -196,16 +200,16 @@ def test_fetch_end_of_life(
 @pytest.mark.parametrize(
     "exception", [exceptions.ConnectTimeout, exceptions.ReadTimeout]
 )
-def test_fetch_end_of_life_ignore_timeout(mocker, requests_mock, exception):
+def test_fetch_end_of_life_ignore_timeout(mocker, requests_mock, exception, project):
     mocker.patch.object(
         LockfileParser, "_get_release_date", return_value=date(2024, 1, 1)
     )
     requests_mock.get(compile("https://endoflife.date/api/[-a-z]+/4.4"), exc=exception)
-    LockfileParser([])._get_version(("django", "4.4.1"), provider="PIP")  # noqa: SLF001
+    LockfileParser(project, [])._get_version(("django", "4.4.1"), provider="PIP")  # noqa: SLF001
 
 
 @pytest.mark.django_db()
-def test_fetch_end_of_life_invalid_json(mocker, requests_mock):
+def test_fetch_end_of_life_invalid_json(mocker, requests_mock, project):
     mocker.patch.object(
         LockfileParser, "_get_release_date", return_value=date(2024, 1, 1)
     )
@@ -214,7 +218,7 @@ def test_fetch_end_of_life_invalid_json(mocker, requests_mock):
         text="503 Service Temporarily Unavailable",
         status_code=503,
     )
-    LockfileParser([])._get_version(("django", "4.4.1"), provider="PIP")  # noqa: SLF001
+    LockfileParser(project, [])._get_version(("django", "4.4.1"), provider="PIP")  # noqa: SLF001
 
 
 @pytest.mark.django_db()
@@ -223,6 +227,7 @@ def test_fetch_end_of_life_no_overwrite_if_already_set(
     dependency_factory: DependencyFactory,
     release_version_factory: ReleaseVersionFactory,
     version_factory: VersionFactory,
+    project: models.Project,
 ) -> None:
     end_of_life = date(2025, 1, 1)
 
@@ -244,7 +249,7 @@ def test_fetch_end_of_life_no_overwrite_if_already_set(
 
     version: models.Version = version_factory(release_version=release_version)
 
-    LockfileParser([])._get_version(  # noqa: SLF001
+    LockfileParser(project, [])._get_version(  # noqa: SLF001
         (dependency.name, version.version), provider=dependency.provider
     )
 
diff --git a/api/outdated/outdated/tests/test_tracking.py b/api/outdated/outdated/tests/test_tracking.py
index 1ab25870..8b6c2c6c 100644
--- a/api/outdated/outdated/tests/test_tracking.py
+++ b/api/outdated/outdated/tests/test_tracking.py
@@ -10,7 +10,7 @@
 from rest_framework import status
 
 from outdated.outdated import tracking
-from outdated.outdated.models import Project
+from outdated.outdated.models import Project, Version
 from outdated.outdated.parser import LockfileParser
 from outdated.outdated.tracking import RepoError, Tracker
 
@@ -217,6 +217,7 @@ def test_sync(
     tracker_mock,
     exists,
     mocker,
+    dependency_source_factory,
     version_factory,
 ):
     project_path = tmp_repo_root / project.clone_path
@@ -237,15 +238,17 @@ def test_sync(
     )
 
     versions = version_factory.create_batch(5)
+
+    def side_effect() -> None:
+        dependency_source_factory(versions=versions, project=project)
+
     lockfile_parser_parser_mock = mocker.patch.object(
-        LockfileParser,
-        "parse",
-        return_value=versions,
+        LockfileParser, "parse", side_effect=side_effect
     )
 
     tracker = Tracker(project)
     assert tracker.local_path == project_path
-    assert not project.versioned_dependencies.all()
+    assert not project.sources.all()
     if exists:
         project_path.mkdir(parents=True, exist_ok=False)
 
@@ -258,13 +261,15 @@ def test_sync(
 
     tracker_fetch_mock.assert_called_once()
 
-    lockfile_parser_init_mock.assert_called_once_with([])
+    lockfile_parser_init_mock.assert_called_once_with(project, [])
 
     lockfile_parser_parser_mock.assert_called_once_with()
 
     tracker_lockfile_mock.assert_called_once()
 
-    assert set(project.versioned_dependencies.all()) == set(versions)
+    assert set(project.sources.values_list("versions", flat=True)) == {
+        v.id for v in versions
+    }
 
 
 @pytest.mark.parametrize("exists", [True, False])
@@ -395,11 +400,12 @@ def test_sync_tracks_changes(tmp_repo_root, project_factory):
     tracker.checkout()
     tracker.sync()
 
-    assert project.versioned_dependencies.count() == 2
+    versions = Version.objects.filter(
+        id__in=project.sources.values_list("versions", flat=True)
+    )
+    assert len(versions) == 2
     for requirement in POETRY_LOCK_REQUIREMENTS:
-        assert requirement in [
-            str(version) for version in project.versioned_dependencies.all()
-        ]
+        assert requirement in [str(version) for version in versions]
 
     def replace_versions(s: str | list[str]) -> str:
         if isinstance(s, list):
@@ -418,8 +424,10 @@ def replace_versions(s: str | list[str]) -> str:
 
     tracker.sync()
 
-    assert project.versioned_dependencies.count() == 2
+    versions = Version.objects.filter(
+        id__in=project.sources.values_list("versions", flat=True)
+    )
+
+    assert len(versions) == 2
     for requirement in replace_versions(POETRY_LOCK_REQUIREMENTS):
-        assert requirement in [
-            str(version) for version in project.versioned_dependencies.all()
-        ]
+        assert requirement in [str(version) for version in versions]
diff --git a/api/outdated/outdated/tracking.py b/api/outdated/outdated/tracking.py
index 6b177f8b..794e0944 100644
--- a/api/outdated/outdated/tracking.py
+++ b/api/outdated/outdated/tracking.py
@@ -112,8 +112,7 @@ def sync(self):
         if not self.local_path.exists():
             self.clone()
         self.fetch()
-        dependencies = LockfileParser(self.lockfiles).parse()
-        self.project.versioned_dependencies.set(dependencies)
+        LockfileParser(self.project, self.lockfiles).parse()
 
     def setup(self):  # pragma: no cover
         self.clone()
diff --git a/api/outdated/outdated/views.py b/api/outdated/outdated/views.py
index e0a16588..07eab5e8 100644
--- a/api/outdated/outdated/views.py
+++ b/api/outdated/outdated/views.py
@@ -15,7 +15,7 @@
 
 class ProjectViewSet(ModelViewSet):
     queryset = models.Project.objects.annotate(
-        min_end_of_life=Min("versioned_dependencies__release_version__end_of_life")
+        min_end_of_life=Min("sources__versions__release_version__end_of_life")
     ).order_by("min_end_of_life")
 
     serializer_class = serializers.ProjectSerializer
@@ -62,6 +62,11 @@ class DependencyViewSet(ModelViewSet):
     permission_classes = [is_readonly()]
 
 
+class DependencySourceViewSet(ModelViewSet):
+    queryset = models.DependencySource.objects.all()
+    serializer_class = serializers.DependencySourceSerializer
+
+
 class MaintainerViewset(ModelViewSet):
     queryset = models.Maintainer.objects.all()
     serializer_class = serializers.MaintainerSerializer
diff --git a/api/outdated/tests/test_unique_boolean_field.py b/api/outdated/tests/test_unique_boolean_field.py
index d028fb8d..a7880a9d 100644
--- a/api/outdated/tests/test_unique_boolean_field.py
+++ b/api/outdated/tests/test_unique_boolean_field.py
@@ -6,7 +6,7 @@ def test_unique_boolean_field(db, maintainer_factory):
     assert Maintainer.objects.count() == 1
     assert maintainer.is_primary
 
-    other_maintainer = maintainer_factory(project=maintainer.project)
+    other_maintainer = maintainer_factory(source=maintainer.source)
 
     assert Maintainer.objects.count() == 2
     assert not other_maintainer.is_primary
diff --git a/api/outdated/urls.py b/api/outdated/urls.py
index e9603402..b05479ce 100644
--- a/api/outdated/urls.py
+++ b/api/outdated/urls.py
@@ -9,6 +9,7 @@
 router.register(r"maintainers", views.MaintainerViewset)
 router.register(r"dependencies", views.DependencyViewSet)
 router.register(r"release-versions", views.ReleaseVersionViewSet)
+router.register(r"dependency-sources", views.DependencySourceViewSet)
 router.register(r"versions", views.VersionViewSet)
 router.register(r"users", UserViewSet)
 
diff --git a/ember/app/components/form.gjs b/ember/app/components/form.gjs
index 45185456..c14ebb8c 100644
--- a/ember/app/components/form.gjs
+++ b/ember/app/components/form.gjs
@@ -50,7 +50,12 @@ export default class FormComponent extends Component {
   }
 
   <template>
-    <form class='uk-form' autocomplete='off' {{on 'submit' this.submit}}>
+    <form
+      class='uk-form'
+      autocomplete='off'
+      {{on 'submit' this.submit}}
+      ...attributes
+    >
       <fieldset class='uk-fieldset'>
         <legend class='uk-legend'>{{@name}}</legend>
         {{yield
diff --git a/ember/app/components/project-compact.gjs b/ember/app/components/project-compact.gjs
index e364b7f8..b7301697 100644
--- a/ember/app/components/project-compact.gjs
+++ b/ember/app/components/project-compact.gjs
@@ -19,7 +19,7 @@ function icon(status) {
 }
 
 function version(project) {
-  return project.versionedDependencies[0];
+  return project.sources.at(0)?.versions.at(0);
 }
 
 const Dependency = <template>
diff --git a/ember/app/components/project-detailed.gjs b/ember/app/components/project-detailed.gjs
index ed6c4afa..3ecbdf29 100644
--- a/ember/app/components/project-detailed.gjs
+++ b/ember/app/components/project-detailed.gjs
@@ -24,7 +24,7 @@ export default class ProjectDetailedComponent extends Component {
       const project = await this.fetch.fetch(
         `/api/projects/${this.args.project.id}/sync?${new URLSearchParams({
           include:
-            'versionedDependencies,versionedDependencies.releaseVersion,versionedDependencies.releaseVersion.dependency',
+            'sources,sources.versions,sources.versions.release-version,sources.versions.release-version.dependency,sources.maintainers,sources.maintainers.user',
         })}`,
         {
           method: 'POST',
@@ -60,8 +60,8 @@ export default class ProjectDetailedComponent extends Component {
     }
   });
 
-  get dependencyData() {
-    return this.args.project.versionedDependencies.map((version) => ({
+  sourceData(source) {
+    return source.versions.map((version) => ({
       component: <template>
         <tr class='{{statusToClass version.status}}'>{{yield}}</tr>
       </template>,
@@ -76,21 +76,24 @@ export default class ProjectDetailedComponent extends Component {
     }));
   }
 
-  get maintainerData() {
-    return this.args.project.maintainers.map((m) => ({
-      values: {
-        username: <template>
-          {{#if m.isPrimary}}<UkIcon @icon='star' @ratio={{0.5}} />
-          {{/if}}{{m.user.username}}
-        </template>,
-        email: <template>
-          <a
-            class='uk-link-text'
-            href='mailto:{{m.user.email}}'
-          >{{m.user.email}}</a>
-        </template>,
-      },
-    }));
+  maintainerData(source) {
+    return source.maintainers
+      .slice()
+      .sort((a, b) => (a.isPrimary - b.isPrimary) * -1)
+      .map((m) => ({
+        values: {
+          username: <template>
+            {{#if m.isPrimary}}<UkIcon @icon='star' @ratio={{0.5}} />
+            {{/if}}{{m.user.username}}
+          </template>,
+          email: <template>
+            <a
+              class='uk-link-text'
+              href='mailto:{{m.user.email}}'
+            >{{m.user.email}}</a>
+          </template>,
+        },
+      }));
   }
 
   <template>
@@ -109,19 +112,21 @@ export default class ProjectDetailedComponent extends Component {
       </div>
 
       <hr class='seperator' />
-      <Table @data={{this.maintainerData}} @title='Maintainers' as |t|>
-        <t.head />
-        <t.body />
-      </Table>
-      <Table
-        @data={{this.dependencyData}}
-        @fallback='No dependencies yet'
-        @title='Dependencies'
-        as |t|
-      >
-        <t.head />
-        <t.body />
-      </Table>
+      {{#each @project.sources as |source|}}
+        <Table
+          @data={{this.sourceData source}}
+          @fallback='No dependencies yet'
+          @title={{source.path}}
+          as |t|
+        >
+          <t.head />
+          <t.body />
+        </Table>
+        <Table @data={{this.maintainerData source}} as |t|>
+          <t.head />
+          <t.body />
+        </Table>
+      {{/each}}
       <UkButton
         @label='Sync'
         @loading={{this.syncProject.isRunning}}
diff --git a/ember/app/components/project-form/component.js b/ember/app/components/project-form/component.js
index 080600ba..661a7b57 100644
--- a/ember/app/components/project-form/component.js
+++ b/ember/app/components/project-form/component.js
@@ -1,7 +1,6 @@
 import { service } from '@ember/service';
 import Component from '@glimmer/component';
 import { dropTask } from 'ember-concurrency';
-import { scheduleTask } from 'ember-lifeline';
 import { tracked } from 'tracked-built-ins';
 
 import { emptyChangeset } from 'outdated/utils';
@@ -10,7 +9,6 @@ import ProjectValidations from 'outdated/validations/project';
 export default class ProjectFormComponent extends Component {
   @service store;
   @service router;
-  @tracked maintainers;
 
   @service notification;
 
@@ -19,51 +17,23 @@ export default class ProjectFormComponent extends Component {
     this.args.project ?? this.store.createRecord('project'),
   );
 
-  constructor(...args) {
-    super(...args);
-    if (this.args.project) {
-      scheduleTask(this, 'actions', () => {
-        this.maintainers = this.project.maintainers;
-        this.project.users = this.project.maintainers.map((m) => m.user);
-        this.project.primaryMaintainer = this.maintainers?.find(
-          (m) => m.isPrimary,
-        )?.user;
-      });
-    }
-  }
-
   saveProject = dropTask(async () => {
     try {
       if (this.project.repoType === 'public') {
         this.project.accessToken = '';
       }
 
+      document
+        .querySelectorAll('[data-source-form-submit-button]')
+        .forEach((e) => e.click());
+
       const project = await this.project.save({
         adapterOptions: {
           include:
-            'versionedDependencies,versionedDependencies.releaseVersion,versionedDependencies.releaseVersion.dependency,maintainers,maintainers.user',
+            'sources,sources.versions,sources.versions.release-version,sources.versions.release-version.dependency,sources.maintainers,sources.maintainers.user',
         },
       });
 
-      this.maintainers
-        ?.filter((m) => !this.project.users?.includes(m.user))
-        .forEach((m) => m.destroyRecord());
-      this.project.users?.forEach((user) => {
-        const maintainer = this.maintainers?.find((m) => m.user.id === user.id);
-        if (maintainer) {
-          maintainer.isPrimary = user.id === this.primaryMaintainer.id;
-          if (maintainer.hasDirtyAttributes) maintainer.save();
-        } else {
-          this.store
-            .createRecord('maintainer', {
-              user,
-              project,
-              isPrimary: user === this.primaryMaintainer,
-            })
-            .save();
-        }
-      });
-
       this.router.transitionTo('projects.detailed', project.id);
       this.project.accessToken = '';
       this.notification.success('Successfully saved!');
@@ -73,19 +43,11 @@ export default class ProjectFormComponent extends Component {
     }
   });
 
-  get primaryMaintainer() {
-    return (
-      this.project.users?.find(
-        (u) => u.id === this.project.primaryMaintainer?.id,
-      ) ?? this.project.users[0]
-    );
+  get repoTypes() {
+    return ['public', 'access-token'];
   }
 
   get users() {
     return this.store.peekAll('user');
   }
-
-  get repoTypes() {
-    return ['public', 'access-token'];
-  }
 }
diff --git a/ember/app/components/project-form/template.hbs b/ember/app/components/project-form/template.hbs
index cfdcc972..24b87a5f 100644
--- a/ember/app/components/project-form/template.hbs
+++ b/ember/app/components/project-form/template.hbs
@@ -30,26 +30,8 @@
     autocomplete="off"
     @hidden={{(eq this.project.repoType "public")}}
   />
-
-  <f.input
-    @name="users"
-    @type="select"
-    @label="Maintainers"
-    @multiple={{true}}
-    @value={{this.project.users}}
-    @options={{this.users}}
-    @searchField="searchField"
-    @visibleField="fullName"
-  />
-  {{#if (gt this.project.users.length 1)}}
-    <f.input
-      @name="primaryMaintainer"
-      @type="select"
-      @options={{this.project.users}}
-      @value={{this.primaryMaintainer}}
-      @searchField="searchField"
-      @visibleField="fullName"
-    />
-  {{/if}}
+  {{#each @project.sources as |source|}}
+    <SourceForm @source={{source}} />
+  {{/each}}
   <f.button @loading={{this.saveProject.isRunning}} />
 </Form>
\ No newline at end of file
diff --git a/ember/app/components/source-form.gjs b/ember/app/components/source-form.gjs
new file mode 100644
index 00000000..9e93ae95
--- /dev/null
+++ b/ember/app/components/source-form.gjs
@@ -0,0 +1,106 @@
+import { service } from '@ember/service';
+import Component from '@glimmer/component';
+import { dropTask } from 'ember-concurrency';
+import perform from 'ember-concurrency/helpers/perform';
+import { scheduleTask } from 'ember-lifeline';
+import { lt, or } from 'ember-truth-helpers';
+import { tracked } from 'tracked-built-ins';
+
+import Form from './form';
+
+import { emptyChangeset } from 'outdated/utils';
+import SourceValidations from 'outdated/validations/source';
+
+export default class SourceForm extends Component {
+  @service store;
+  @service notification;
+
+  @tracked source = emptyChangeset(SourceValidations, this.args.source);
+
+  constructor(...args) {
+    super(...args);
+
+    scheduleTask(this, 'actions', () => {
+      const source = this.args.source;
+      source.users = source.maintainers.map((m) => m.user);
+      source.primaryMaintainer = source.maintainers.find(
+        (m) => m.isPrimary,
+      )?.user;
+    });
+  }
+
+  get primaryMaintainer() {
+    return (
+      this.source.users?.find(
+        (u) => u.id === this.source.primaryMaintainer?.id,
+      ) ?? this.source.users[0]
+    );
+  }
+
+  get users() {
+    return this.store.peekAll('user');
+  }
+
+  saveMaintainers = dropTask(async () => {
+    try {
+      this.source.maintainers
+        ?.filter(
+          (m) => !this.source.users?.map((u) => u.id).includes(m.user.id),
+        )
+        .forEach((m) => m.destroyRecord());
+      this.source.users
+        ?.filter(
+          (u) => !this.source.maintainers?.find((m) => m.user.id === u.id),
+        )
+        .forEach((user) => {
+          this.store.createRecord('maintainer', {
+            user,
+            source: this.args.source,
+            isPrimary: user.id === this.primaryMaintainer.id,
+          });
+        });
+      this.source.maintainers.forEach((m) => {
+        m.isPrimary = m.user.id === this.primaryMaintainer.id;
+        if (m.hasDirtyAttributes) m.save();
+      });
+      this.store.findRecord('dependency-source', this.source.id, {
+        include: 'maintainers,maintainers.user',
+      });
+      this.notification.success(
+        `Successfully saved maintainers for ${this.source.path}`,
+      );
+    } catch (e) {
+      this.notification.danger(e);
+      console.error(e);
+    }
+  });
+
+  <template>
+    <Form
+      @onSubmit={{perform this.saveMaintainers}}
+      @model={{this.source}}
+      @name={{@source.path}}
+      as |f|
+    >
+      <f.input
+        @label='Maintainers'
+        @name='users'
+        @type='select'
+        @options={{this.users}}
+        @multiple={{true}}
+        @searchField='searchField'
+        @visibleField='fullName'
+      />
+      <f.input
+        @name='primaryMaintainer'
+        @options={{this.source.users}}
+        @hidden={{lt (or this.source.users.length 0) 2}}
+        @value={{this.primaryMaintainer}}
+        @type='select'
+        @searchField='searchField'
+        @visibleField='fullName'
+      />
+      <f.button class='uk-hidden' data-source-form-submit-button />
+    </Form>
+  </template>
+}
diff --git a/ember/app/models/dependency-source.js b/ember/app/models/dependency-source.js
new file mode 100644
index 00000000..7401f81d
--- /dev/null
+++ b/ember/app/models/dependency-source.js
@@ -0,0 +1,20 @@
+import Model, { attr, hasMany, belongsTo } from '@ember-data/model';
+import { tracked } from 'tracked-built-ins';
+
+export default class DependencySourceModel extends Model {
+  @attr status;
+  @attr path;
+
+  @hasMany('version', { inverse: null, async: false }) versions;
+  @hasMany('maintainer', { inverse: 'source', async: false, as: 'source' })
+  maintainers;
+  @belongsTo('project', {
+    inverse: 'sources',
+    async: true,
+    as: 'dependency-source',
+  })
+  project;
+
+  @tracked users;
+  @tracked primaryMaintainer;
+}
diff --git a/ember/app/models/maintainer.js b/ember/app/models/maintainer.js
index 3742782b..471be772 100644
--- a/ember/app/models/maintainer.js
+++ b/ember/app/models/maintainer.js
@@ -2,6 +2,12 @@ import Model, { attr, belongsTo } from '@ember-data/model';
 
 export default class MaintainerModel extends Model {
   @attr isPrimary;
-  @belongsTo('project', { inverse: 'maintainers', async: true }) project;
+  @belongsTo('source', {
+    inverse: 'maintainers',
+    async: true,
+    as: 'maintainer',
+    polymorphic: true,
+  })
+  source;
   @belongsTo('user', { inverse: null, async: false }) user;
 }
diff --git a/ember/app/models/project.js b/ember/app/models/project.js
index 6fea72ad..7acdf1df 100644
--- a/ember/app/models/project.js
+++ b/ember/app/models/project.js
@@ -1,5 +1,4 @@
 import Model, { attr, hasMany } from '@ember-data/model';
-import { tracked } from '@glimmer/tracking';
 
 export default class ProjectModel extends Model {
   @attr name;
@@ -8,11 +7,13 @@ export default class ProjectModel extends Model {
   @attr({ defaultValue: 'public' }) repoType;
   @attr accessToken;
 
-  @hasMany('version', { inverse: null, async: false }) versionedDependencies;
-  @hasMany('maintainer', { inverse: 'project', async: false }) maintainers;
-
-  @tracked users;
-  @tracked primaryMaintainer;
+  @hasMany('dependency-source', {
+    inverse: 'project',
+    async: false,
+    as: 'project',
+    polymorphic: true,
+  })
+  sources;
 
   get repoURL() {
     return `https://${this.repo}`;
diff --git a/ember/app/routes/projects/add.js b/ember/app/routes/projects/add.js
index 8a55ccf8..8da62a47 100644
--- a/ember/app/routes/projects/add.js
+++ b/ember/app/routes/projects/add.js
@@ -5,9 +5,10 @@ export default class ProjectsAddRoute extends Route {
   @service store;
   beforeModel() {
     this.store.findAll('dependency');
-    this.store.findAll('releaseVersion');
+    this.store.findAll('release-version');
     this.store.findAll('version');
     this.store.findAll('user');
     this.store.findAll('maintainer');
+    this.store.findAll('dependency-source');
   }
 }
diff --git a/ember/app/routes/projects/detailed.js b/ember/app/routes/projects/detailed.js
index bd88ca0d..bca2cfc8 100644
--- a/ember/app/routes/projects/detailed.js
+++ b/ember/app/routes/projects/detailed.js
@@ -5,7 +5,7 @@ export default class ProjectDetailedRoute extends Route {
   model(params) {
     return this.store.findRecord('project', params.project_id, {
       include:
-        'versionedDependencies,versionedDependencies.releaseVersion,versionedDependencies.releaseVersion.dependency,maintainers,maintainers.user',
+        'sources,sources.versions,sources.versions.release-version,sources.versions.release-version.dependency,sources.maintainers,sources.maintainers.user',
     });
   }
 }
diff --git a/ember/app/routes/projects/index.js b/ember/app/routes/projects/index.js
index 5186e74a..5deabd36 100644
--- a/ember/app/routes/projects/index.js
+++ b/ember/app/routes/projects/index.js
@@ -14,7 +14,7 @@ export default class ProjectsRoute extends Route {
   model() {
     return this.store.findAll('project', {
       include:
-        'versionedDependencies,versionedDependencies.releaseVersion,versionedDependencies.releaseVersion.dependency,maintainers,maintainers.user',
+        'sources,sources.versions,sources.versions.release-version,sources.versions.release-version.dependency,sources.maintainers,sources.maintainers.user',
     });
   }
 }
diff --git a/ember/app/routes/versions/index.js b/ember/app/routes/versions/index.js
index aeb2a11b..cf26eb6f 100644
--- a/ember/app/routes/versions/index.js
+++ b/ember/app/routes/versions/index.js
@@ -7,7 +7,7 @@ export default class DependencyIndexRoute extends Route {
   async model() {
     await this.store.findAll('project', {
       include:
-        'versionedDependencies,versionedDependencies.releaseVersion,versionedDependencies.releaseVersion.dependency',
+        'sources,sources.versions,sources.versions.release-version,sources.versions.release-version.dependency',
     });
     return await this.store.peekAll('version');
   }
diff --git a/ember/app/validations/project.js b/ember/app/validations/project.js
index e65e5076..9fa8163c 100644
--- a/ember/app/validations/project.js
+++ b/ember/app/validations/project.js
@@ -28,5 +28,4 @@ export default {
       validateFormat({ regex: /^[-_a-zA-Z\d]*$/ }),
     ],
   }),
-  maintainers: [],
 };
diff --git a/ember/app/validations/source.js b/ember/app/validations/source.js
new file mode 100644
index 00000000..1ce0c76d
--- /dev/null
+++ b/ember/app/validations/source.js
@@ -0,0 +1,6 @@
+import { validatePresence } from 'ember-changeset-validations/validators';
+
+export default {
+  users: [validatePresence(true)],
+  primaryMaintainer: [],
+};
diff --git a/ember/mirage/config.js b/ember/mirage/config.js
index 6589dbc0..24c02704 100644
--- a/ember/mirage/config.js
+++ b/ember/mirage/config.js
@@ -40,8 +40,9 @@ function routes() {
   this.passthrough('https://outdated.local/auth/**');
 
   this.namespace = '/api';
-  this.resource('maintainers');
   this.resource('users');
+  this.resource('dependency-sources');
+  this.resource('maintainers');
   this.resource('projects');
   this.resource('versions');
   this.resource('release-versions');
diff --git a/ember/mirage/factories/dependency-source.js b/ember/mirage/factories/dependency-source.js
new file mode 100644
index 00000000..cb9b86e5
--- /dev/null
+++ b/ember/mirage/factories/dependency-source.js
@@ -0,0 +1,55 @@
+import { faker } from '@faker-js/faker';
+import { Factory, trait } from 'miragejs';
+
+export default Factory.extend({
+  path: () =>
+    [
+      faker.helpers.arrayElement([
+        'app',
+        'web',
+        'api',
+        'frontend',
+        'backend',
+        'ember',
+      ]),
+      faker.helpers.arrayElement([
+        'poetry.lock',
+        'pnpm-lock.yaml',
+        'yarn.lock',
+      ]),
+    ].join('/'),
+  status: () => 'UNDEFINED',
+
+  withVersions: trait({
+    status: () =>
+      faker.helpers.arrayElement(['OUTDATED', 'WARNING', 'UP-TO-DATE']),
+
+    afterCreate(source, server) {
+      source.update({
+        versions: [
+          server.create('version', 'isEndOfLife'),
+          server.create('version', 'isNearlyEndOfLife'),
+          server.create('version'),
+        ],
+      });
+    },
+  }),
+
+  withMaintainers: trait({
+    afterCreate(source, server) {
+      source.update({
+        maintainers: [
+          server.create('maintainer', {
+            user: server.create('user'),
+            source,
+            isPrimary: true,
+          }),
+          server.create('maintainer', {
+            user: server.create('user'),
+            source,
+          }),
+        ],
+      });
+    },
+  }),
+});
diff --git a/ember/mirage/factories/project.js b/ember/mirage/factories/project.js
index 500b5ad6..132a9663 100644
--- a/ember/mirage/factories/project.js
+++ b/ember/mirage/factories/project.js
@@ -11,33 +11,24 @@ export default Factory.extend({
       this.name,
     )}`;
   },
-  withVersions: trait({
-    status: () =>
-      faker.helpers.arrayElement(['OUTDATED', 'WARNING', 'UP-TO-DATE']),
-
+  withMaintainers: trait({
     afterCreate(project, server) {
       project.update({
-        versionedDependencies: [
-          server.create('version', 'isEndOfLife'),
-          server.create('version', 'isNearlyEndOfLife'),
-          server.create('version'),
+        sources: [
+          server.create('dependency-source', 'withMaintainers', { project }),
         ],
       });
     },
   }),
-  withMaintainers: trait({
+  withSources: trait({
+    status: () =>
+      faker.helpers.arrayElement(['OUTDATED', 'WARNING', 'UP-TO-DATE']),
+
     afterCreate(project, server) {
       project.update({
-        maintainers: [
-          server.create('maintainer', {
-            user: server.create('user'),
-            project,
-            isPrimary: true,
-          }),
-          server.create('maintainer', {
-            user: server.create('user'),
-            project,
-          }),
+        sources: [
+          server.create('dependency-source', 'withVersions', { project }),
+          server.create('dependency-source', { project }),
         ],
       });
     },
diff --git a/ember/mirage/scenarios/default.js b/ember/mirage/scenarios/default.js
index 801cdfca..63d5a59d 100644
--- a/ember/mirage/scenarios/default.js
+++ b/ember/mirage/scenarios/default.js
@@ -4,8 +4,7 @@ export default function (server) {
     This data will not be loaded in your tests.
   */
   // server.createList('post', 10);
-  server.createList('project', 3, 'withVersions');
+  server.createList('project', 3, 'withSources');
   server.createList('project', 1);
-  server.createList('project', 2, 'withMaintainers', 'withVersions');
   server.createList('user', 2);
 }
diff --git a/ember/tests/acceptance/projects-test.js b/ember/tests/acceptance/projects-test.js
index beca2440..647792fa 100644
--- a/ember/tests/acceptance/projects-test.js
+++ b/ember/tests/acceptance/projects-test.js
@@ -10,7 +10,11 @@ module('Acceptance | projects', function (hooks) {
   setupMirage(hooks);
 
   test('Project clickable and link is correct', async function (assert) {
-    const project = await this.server.create('project', 'withVersions');
+    const project = await this.server.create(
+      'project',
+      'withSources',
+      'withMaintainers',
+    );
 
     await authenticateSession();
     await visit('/');
@@ -25,8 +29,6 @@ module('Acceptance | projects', function (hooks) {
       .dom('[data-test-repo-link]')
       .hasProperty('href', `https://${project.repo}`);
 
-    assert
-      .dom('tbody>tr')
-      .exists({ count: project.versionedDependencies.models.length });
+    assert.dom('h2.table-header').exists({ count: project.sources.length });
   });
 });
diff --git a/ember/tests/integration/components/project-compact-test.js b/ember/tests/integration/components/project-compact-test.js
index df438ea0..318cde7a 100644
--- a/ember/tests/integration/components/project-compact-test.js
+++ b/ember/tests/integration/components/project-compact-test.js
@@ -12,12 +12,12 @@ module('Integration | Component | project-compact', function (hooks) {
   setupIntl(hooks);
 
   test('it renders correctly', async function (assert) {
-    const project = this.server.create('project', 'withVersions');
+    const project = this.server.create('project', 'withSources');
 
     const store = this.owner.lookup('service:store');
     this.project = await store.findRecord('project', project.id, {
       include:
-        'versionedDependencies,versionedDependencies.releaseVersion,versionedDependencies.releaseVersion.dependency',
+        'sources,sources.versions,sources.versions.release-version,sources.versions.release-version.dependency',
     });
     await render(hbs`<ProjectCompact @project={{this.project}} />`);
     assert.dom('[data-test-dependency-compact]').exists();
diff --git a/ember/tests/integration/components/project-detailed-test.js b/ember/tests/integration/components/project-detailed-test.js
index 939f0de3..4ad4d262 100644
--- a/ember/tests/integration/components/project-detailed-test.js
+++ b/ember/tests/integration/components/project-detailed-test.js
@@ -11,12 +11,12 @@ module('Integration | Component | project-detailed', function (hooks) {
   setupIntl(hooks);
 
   test('it renders correctly', async function (assert) {
-    const project = await this.server.create('project', 'withVersions');
+    const project = await this.server.create('project', 'withSources');
     const store = this.owner.lookup('service:store');
 
     this.project = await store.findRecord('project', project.id, {
       include:
-        'versionedDependencies,versionedDependencies.releaseVersion,versionedDependencies.releaseVersion.dependency',
+        'sources,sources.versions,sources.versions.release-version,sources.versions.release-version.dependency,sources.maintainers,sources.maintainers.user',
     });
 
     await render(hbs`<ProjectDetailed @project={{this.project}} />`);
@@ -27,8 +27,8 @@ module('Integration | Component | project-detailed', function (hooks) {
       .hasProperty('href', this.project.repoURL);
 
     assert
-      .dom('tbody>tr')
-      .exists({ count: this.project.versionedDependencies.length });
+      .dom('h2.table-header')
+      .exists({ count: this.project.sources.length });
 
     this.project.versionedDependencies = [];
     await settled();