don't introduce a dependency, use `subprocess.check_output` directly instead