yaml-cpp uses #.#.# but there are some entires with #.#.#.# so later needs to be filtered out

All boost versions for the last 10 years start with 1.x.x. Black Duck thinks some
version are 4.x.x which are bogus and throws off the sorting.