soft pin package versions that don't follow semver
I'm looking at you pytz ;)