dependency installer - might end up doing source package install