ensured dependencies are only re-downloaded if outdated

thus reducing the time it takes to set up a dev instance

please note the commit message

this addresses #1066