Resolving of dependencies for each uploaded bundle does not cope well with multiple version.

[saep]

The algorithm to resolve dependencies is not yet fully implemented.

There is a test class that defines some bogus package names with different versions, but it has not been finished.

I think that a depth first search should be the general answer to the problem. Every version object has a merge method that can be used to combine version requirements.