build: sign, fixed dep location.