prefer setuptools over distutils for dependency management