For reference:
GitHub and GitLab also use the @ syntax when a commit in a different repo is linked.
This is the most elegant and intuitive way to reference a version of a project/package from all i have seen.
But maybe someone can think of a reason why this could lead to problems or limitations?