ensure package/version is a string