NPM and some other packages (including read-package-json that @pulumi/pulumi) uses require the version field to be a valid semver. So ensure ours are.