install requires doesn't check dependency_links