third party dependencies included in repo