Support Clojars for version enumeration

It looks like [GHSA-cp4w-6x4w-v2h5](https://osv.dev/vulnerability/GHSA-cp4w-6x4w-v2h5) is not recognized by the OSV API for this request:

```
curl -X POST -d \
'{"version": "1.13.95", "package": {"name": "lambdaisland:uri", "ecosystem": "Maven"}}' \
"https://api.osv.dev/v1/query"
```

The OSV database contains introduced/fixed metadata that seems like the above curl should yield (at least) GHSA-cp4w-6x4w-v2h5 but instead I get back an empty object.