move 3rdparty dependencies to app