package: update "debug" to v1.0.0
package: be loose with the `debug` version

I'm the maintainer now so it's not going to break.