put sha.js back in the deps
3.4.1