pin dependency packagemanifest==0.3.0