add package_ensure for razor package, so that we can pin versions