rename source -> dependency which was added to downloader in a recent merge