reorganize dependencies list

follow the advice of:
https://caremad.io/blog/setup-vs-requirement/