The `Dependency` struct is logically acting as an `enum`,
with 3 discrete possibilities. However, some of the logic is
piggybacking on the (original) version logic.
`Repository` is one of them, and by separating things,
we can make stronger assumptions in `Version` and `Dependency`.