Dependency constraints get correctly validated when doing phpcq update - we do not validate the constraints on phpcq install though and therefore installing incompatible versions.

We should do it like composer and validate on install as well.