package.json is now more strict on what versioning