frontend dependency from special github repository, disabled security for now