add 'commons-io' dependency.
do not follow symlinks.