compare package versions more strictly