README: fix dep url