all libraries need to use release branches or explitely defined tags/commits