The prohibition on the use of a dash in the package name is very difficult.

The only limitation I know about is the use of a dash symbol in the <Dependencies> tag to separate the name of a component from its version, but this symbol is redundant, since comparisons (=, >, <, >= and <=) are sufficient for this separation.

Also, it is not always possible to limit ourselves to numbers in the package versions.