Alpine: possibly wrong information is indexed

As I mentioned in #801 there is an issue with the way Alpine packages are indexed.

The following example illustrates this:

https://git.alpinelinux.org/aports/tree/main/py3-jinja2/APKBUILD?id=8531e658bb1a196c87ac3e8abf0bb18022266aa5

This `APKBUILD` file says the version of the package is `2.11.3-r0`. But at line 18 there is a different version number:

```
# secfixes:
# 1.11.3-r0:
# - CVE-2020-28493
```

It looks like someone made a typo in the version number and it is *this* number that VulnerableCode seems to be using (as demonstrated in #801 ).

The solution is to do a little clean up and cross correlate this information with the Alpine package information.