bug: when multiple modules are required with different version, wrong version could be used

[mastilver]

Example:
A@1 -> B@1
C@1 -> B@2 (peerDependency)
B@2 (because of C)

A can't be served through cdn, B and C can

A@1 is required: it's being bundled
B@1 is required by A: it's being served from the cdn
C@1 is required: it's being served from the cdn / It will use B@1 as it's exposing a global var
B@2 is required: it's being bundled / it will not be use as C is already using B@1

---

Raised by @fedeoo on #21