use https for deps retrival