Use specific refs (vs. master) for dependency URLs

Fixes #13.