It seems like handling ranges (~) is possible but it will be a somehow larger refactoring because until now we assumed erroneous behavior (yielding findings even if a range matches a version). To not block the release, I suggest we use what we have for now, and address the fix in a separate issue.

Originally posted by @waldekmastykarz in #7046 (comment)