requiring cbor>=0.1.15 with the fixes for sigsgv and bigname leak