Are you really intending to have an array of hashes?  The recipe seems to also be looking for a version key but you don't have one here.

Also, I don't think this makes much sense as an attribute.  Is there are reason this might change per environment?  I would assume that package dependencies are always the same.