moved dependency tracking from david-dm to gemnasium