(This avoids false positive reports in some circumstances, such as a pair of depends on e.g. foo-2.0 and 2.0.3, and also for more complicated forms of version numbers.)