It's possible to get an empty list for `pypi.package_releases(py)`--it failed when I ran it. We should just skip packages that returned empty lists.