[spion]

A softer interpretation is possible. "*" should mean that the dependency cannot unpublish all packages and must have at least one version available.

[charcircuit]

If someone has an older version in the lock file this will break the build.

[spion]

Which they can fix by updating the lock file.