manage package bounds properly

[CarloLucibello]

Some bounds are missing from the Project.toml, some should be updated. This issue is easily fixed by merging the CompatHelper's open PRs

[rayegun]

Thanks!