vendoring in deps to prevent future issues :(