checking in dependencies to allow for more deterministic deployments