add support for cloning non npm hosted deps into a repo

because it makes it a lot simpler to create a new tarball with.