bugfix: if find package location, `break` loop.
add `semver` dependencies.