use local tarballs for dependencies