add support for cloning non npm hosted deps into a repo

yes, I suppose I should hash on something else.