Support passing in a complete URL for deps

closes #268