setup requires.io to keep track of dependencies

[BenjamenMeyer]

Some of the dependencies have changed and it's good practice to pin them; requires.io provides a nice travis-ci like solution for detecting when dependencies change and then submitting PRs to do so.