fix(package): tilde version for `which` dep