use Gemnasium for dependency monitoring