well, I guess it's debateable whether a non-versioned req should just use what's in the cache, or check for the latest.  maybe just use cache, unless `--upgrade` is set.  that matches the way #878 was written up.