+ hard-code third-party paths in CMake files