add gemnasium for dependency tracking