package json had swapped semvers