Missing max version check in curated feed

The logic to ignore patch version didn't maintain the max version, so it
would let in packages it shouldn't have
Merge pull request #3 from citizenmatt/curated_feed_required_version_broken

Required dependency curated feed lets in too many packages