using tarball url, rather than git