I was not aware of that feature. To call it rare would be an understatement I think. > while it's pretty common in the NPM world, and I don't immediately unde

I was not aware of that feature. To call it rare would be an understatement I think. > while it's pretty common in the NPM world, and I don't immediately understand why that would be so. I think it boils down to Node projects typically specifying dependencies in the form “any version >= X”, effectively “always use the latest.” Dependencies can therefore get bumped silently just by rebuilding, essentially. Whereas in the Java world updating dependencies is a deliberate process.