I would use ``~1.0`` here, to rely on semver totally (i.e. expecting that JsonpCallbackValidator will not break BC in a 1.x release)