Avoid specific package IDs and/or versions

We need to avoid using specific package IDs and/or package versions in our product.