Is there a specific reason why we are pulling from github master and not pypi? If the package is not on pypi, we should at lease pin ourselves to a specific SHA1 in git to prevent surprise incompatibilities.