loosen dependencies, fix for new graph package, closes #1