Use CPM to manage its own dependencies

[YassenEfremov]

For now split-string is really the only dependency that can be managed by CPM.