Non-semver git-tags and commit-ish verification alongside with semver

Hello, I made it working with my project dependencies like "foo": "git://host/foo.git#4.0.1" or "foo": "git://host/foo.git#abcdef0987654321"