we should not be committing copies of our deps