README: make sources of dependencies clearer