Helpers for reading resolved dependency versions from mix.lock.
mix.lock is valid Elixir, but evaluating it on newer Elixir versions emits
warnings for quoted keyword keys like "ash":. Version checks only need the
resolved Hex version string, so parse that directly instead.