--unsafe-package doesn't normalize hyphens/underscores

[ntjess]

Pip resolves package-name and package_name to the same dependency. However, the unsafe package specifier doesn't taket his into account on the latest released version.

Example: pip-compile --unsafe-package opencv_python --no-allow-unsafe still installs opencv-python in the final output.