image-cache needs an ssh url now that its a private repo
Pin hxt and attoparsec to avoid rebuilding