more restrictive package versions