Don't collect package versions that don't meet the direct requirements.

[notatallshaw]

Currently if I put a lower bound and upper bound on requirements pip-resolver-benchmark fetch will collect versions of that requirements outside those bounds. I assume this isn't intentional?