extract dependency ranges