202306/29Beyond semantic versioning: updatePolicySome random thoughts on how to make NPM package updates a bit safer