--fix option does not work when dependencies use "*" or "" as the version

[ddzz]

Similar to #345, dependencies that have "*" or "" as the version are not being autofixed.

[bmish]

I noticed this as part of #359 too.

Let's say we have the versions * and ^1.2.3 present for a dependency. I'm currently leaning towards not autofixing in this situation because converting one to the other could be too large of a behavior change and it seems like some monorepos choose one or the other in different situations.

For example. For dependencies of published libraries, we usually want to specify the desired version range for safety/compatibility. For internal-only packages or dev-dependencies, we may not care as much about the specific version and might just use * to indicate that we're likely fine with any version or always getting the latest version.

So we probably shouldn't autofix. The next question is should we still consider having the versions * and ^1.2.3 as a mismatch? Probably not, unless we want to force people to convert * to actual ranges, which seems too aggressive.

As for blank versions "", I haven't seen that before. Need to find out what the behavior is there and why someone would use it.