stop using submodules; relying on package.json dependencies