update readme, peg dep versions