force packages to specify dependency constraints
mark core packages