add Ono for XML parsing
move third-party dependencies