Allow more than one dash in package version names

This is consistent with the semver spec, and should fix