use npm for dependencies, not git-submodule