wip: download thrid-party dependencies