loose upper bound for deps