don't synchronize when accessing version stuff, tolerate potential duplication. Also, switch to web-commons-bom