Any reasonable dependency management tool should allow you to pin down any part of the semver version. For example on regular upgrade only pull patches or minor

Any reasonable dependency management tool should allow you to pin down any part of the semver version. For example on regular upgrade only pull patches or minors and require a manual change to upgrade otherwise. Appending a version number to the library name is a heck around completely inadequate dependency management tools. A language not having a tool en par with bundler, cargo or yarn is a massive negative for me when looking at new languages.