whitelisting packages across versions

[larsrinn]

Hey,

this is a great package, it just enriched our CI pipeline :)

Is it possible to whitelist packages without pinning them to specific versions? I presumed:

[Authorized Packages]
uuid: "*"

or

[Authorized Packages]
uuid: "<1.5"

but this wasn't working...

[ochedru]

I agree this is too restrictive. This should be quite straightforward to extend the version check in the check_package() function with e.g. python-semver. I'll try to put it together into a PR.