dependencies of a package