Latest version from foreign project

[danischroeter]

see https://github.com/altoo-ag/akka-kryo-serialization/issues/207

https://index.scala-lang.org/altoo-ag/akka-kryo-serialization/akka-kryo-serialization picks up a project with a different groupid and counts this as latest

    <groupId>com.github.enalmada</groupId>
    <artifactId>akka-kryo-serialization_2.13</artifactId>
    <packaging>jar</packaging>
    <description>akka-kryo-serialization</description>
    <version>1.1.3</version>

the com.github.enalmada artifacts contain the code of io.altoo but the maven metadata is wrong.

I think sonatype should not have accepted this upload but more imporantly scaladex should not count foreign versions to a project.