Dependency management

We are relying on a couple of projects in pre-1.0.0 stage, which means minor version bumps are usually API breaking. Right now most of the versions as free, but it might be better to have some version ranged we pin them to.