The last time we tried to get upstream to update the colorama version dependency it took on the order of 6 months. As such waiting for upstream is not an option IMHO. Also when we ignored the version requirement from upstream I don't think anything broke.