newline between `sha1` and dependencies