Treat dep. as outdated if its _from changes

This is per [Isaacs comment](https://github.com/isaacs/npm/issues/1727#issuecomment-5128983) in #1727, and means that when a dep is changed in the `package.json` file, it will be updated; whether or not the `.version` has actually changed.