fix: pip verification of external deps