fix #91: prefer locally declared package dependencies (when present)