Fix loose deps

- hard pin dynamically inserted libraries
- fix deps loose mechanism so that:
 * short versioned libraries are scopped as the rest
 * additional restrictions (blacklists for eg) are ported over
you can remove the call to 0.0.4 as well