only use most active version of a dependency

#368