add --allow-all-external option to finding out of date packages