Validator allows 'version' attribute on dependencies