add support for cloning non npm hosted deps into a repo

for some reason was having issues piping the tarball stream directly into gzip