using --force can result in the wrong version being installed

[kpankonen]

If the request version isn't available --force will make it install a different version instead

$ /usr/bin/pear upgrade --force phpseclib.sourceforge.net/Crypt_AES-0.3.7
WARNING: failed to download phpseclib.sourceforge.net/Crypt_AES, version "0.3.7", will instead download version 1.0.0, stability "stable"
downloading Crypt_AES-1.0.0.tgz ...
Starting to download Crypt_AES-1.0.0.tgz (3,051 bytes)
....done: 3,051 bytes
downloading Crypt_Rijndael-1.0.0.tgz ...
Starting to download Crypt_Rijndael-1.0.0.tgz (14,270 bytes)
...done: 14,270 bytes
downloading Crypt_Base-1.0.0.tgz ...
Starting to download Crypt_Base-1.0.0.tgz (17,009 bytes)
...done: 17,009 bytes
upgrade ok: channel://phpseclib.sourceforge.net/Crypt_Base-1.0.0
upgrade ok: channel://phpseclib.sourceforge.net/Crypt_Rijndael-1.0.0
upgrade ok: channel://phpseclib.sourceforge.net/Crypt_AES-1.0.0