is there a (recommended) way to query a valid version from specifier? or as wider conversation lowest/highest versions within constraints? https://github.com/aquasecurity/go-pep440-version/blob/main/specifier.go#L162 https://github.com/anchore/syft/issues/2874