Allow show <package> <constraint> as well as a version
Fix handling of aliases in streamable repos, fixes #1776, fixes #1749
Update deps
Add readme entry to lock file to explain what it is