Use real semver comparison to find latest.

Previous method failed as some older packages did not have the .time
field.

Fixes #2.