avoid <dependencyManagement>