explicitly call out dependencies for express