no package version pinning