setting frequently updated library as dependency is better