laxer version constraint for dependencies