cryptohash dependency loosened