cart build: store dependencies in subdirectory