Relax dependency bounds, do not require IDs in JSON + cardId fix