That reminds me of openssl, which tends to release 1.0.2a, 1.0.2b, 1.0.1u and pretend it's the same version to not have to go through another audit. They fixed

That reminds me of openssl, which tends to release 1.0.2a, 1.0.2b, 1.0.1u and pretend it's the same version to not have to go through another audit. They fixed that and moved to semver, and the FAA should put limits on what can be "technically the same version" too.