Package managers could stop being NP hard by taking away negative dependencies, including maximum version limits