@hackage gore-and-ash dependencies