Tighten up PVP compliance for main package.
Also make sure lower-bounds are actually buildable.
Bump network dependency