don't use different source tarballs for dependencies

debian doesn't support this very well (no underscores allowed), so
we switch back to packaging all dependencies with the sources