SemVer is awful. Yes, even for libraries. The only purpose of SemVer is to express whether a change is breaking or not. It fails at that. Nobody can predict wh

SemVer is awful. Yes, even for libraries. The only purpose of SemVer is to express whether a change is breaking or not. It fails at that. Nobody can predict whether a change is breaking. Because code is complicated, and code with dependencies is exponentially complicated. At best SemVer communicates from one human to another the _expectation_ about whether a change is breaking. The expectation can, and frequently is, broken. All changes are breaking changes. Vendor your dependencies by hash. Humans cannot be trusted.