depot package version requirements are too strict