On 2/17/20 10:37 AM, Ludovic Courtès wrote: > That’s why I wrote that 0.4.6 is an approximation (probably a good one > because it’s apparently known to work.) Just grabbing the version from the semver range would work for some ranage would break on Hyphenated ranges (1.2.3 - 2), Combining ranges (>=0.14 <16) and on the asterisk range operator (1.*.* or 2.*) Currently we are just trying to pick the most recent version that fits in the semver range. > We can do something smarter, but then it’s only useful if the updater is > equally smart—that is, it can update 0.4.6 to 0.4.13 whenever that > version is out, knowing that blake2-rfc will still work fine. Yep argeed! I would like to fix the updater as well, but i thought i should wait to send that in after this one gets in. Also it can quickly turns in to a SAT problem. I think we have two basic options though. 1) update everything to the newest possible version (easiest and this is what the importer does currently) 2) make the smallest possible dependency graph for all packages (harder, involves a SAT solver)