Support different version specifications

[mflknr]

When checking for resolved packages the executable only refers to a specific version. If something different e. g. a commit hash has been used to resolve a package the executable should at least handle it gracefully.