remove use of sourceforge for getting deps since it is unreliable