add version pins and packages