pin version for missing packages