semver safe version requirement