[minor] use npm dependencies rather than git