package: loosely pin deps
test: nan-ify native tests