This isn't a killer, but we should do something about it post-merge: it'll report a nonsensical recommended syntax like `somepackage-abc123abc123abc123abc123` at https://github.com/erikrose/peep/pull/38/files#diff-9a7f6a81fd69f2b13c682d975ef3991eR384 if the peep hash is missing.