fix: dependency management