If I use a package manager over decentralized systems (like ipfs), and a decentralized system use hash instead of version number. how I can automatically updat

If I use a package manager over decentralized systems (like ipfs), and a decentralized system use hash instead of version number. how I can automatically update to the last version of a package? how the package manager know what is the last valid version?