They are. The problem is the prevalence of version ranges, which were never part of semantic versioning and instead added by npm. The author published a new ver

They are. The problem is the prevalence of version ranges, which were never part of semantic versioning and instead added by npm. The author published a new version as a patch release which means everyone using version ranges automatically pulled it.