Update README, add safer dependency notation