package: pin "global" to v2.0.1
don't rely on the implicit global, be explicit

Shouldn't really make a difference in practice,
but explicit is always better...
component: pin "component/global" to v2.0.1
v1.0.2