package dependency from private repository