specify dependencies and versions