straight underscore version dependency at package.json