cpanfile is the correct place to list dependencies