add note about third-party dependencies