allow "-" in package names