Yeah, never upgrade, fork and get the security updates somehow in that new fork. Not very convenient. Semver is not an excuse to break your clients. The reaso

Yeah, never upgrade, fork and get the security updates somehow in that new fork. Not very convenient. Semver is not an excuse to break your clients. The reason given was "code size and keeping the API surface small". Both are bogus, especially since this is part of an optimizing compiler who will REMOVE unused code. Leaving simple forward from goog.isArray to Array.isArray in there does not cost any maintenance, does not mean extra tests (you already have those) and does not mean your API surface is overblown.