Consider checking out git working tree instead of using git archive to install deps
As pointed out by lukego on IRC, it's nice to use git blame
and similar tools on your dependencies.
Additionally, this may solve borodust's request to have CLPM support submodules and LFS.