There was a hyphen range bug in semver that prevented constraints
in the form of v2.3.5-20161202202307-sha.e8fc5e5. This would be
parsed incorrectly as a hyphen range and then fail. The bug in
semver was fixed in semver v1.2.2 for this issue.