We never verified minimum version requirements for dependencies and
allow higher versions without bounds. We could just as well ignore
versions for now, until Pipfile or something else becomes a standard.