fetch build time dependencies via SRC_URI