remove strong package version requirement from requests