practice has been to externalize version from the `<dependency>` declaration.