kpm restore downloads the latest version for indirect dependencies without version

parent #377 
You don't need this