Feature/package data stream not filename

Freeze dependency versions and stop relying on package data files to be on the filesystem.