avoid ssh for dependencies