make git dependencies non-editable