The general rule I use is that libraries should not specify upper bounds on dependencies but applications should. I use Poetry for all my projects, but I agree

The general rule I use is that libraries should not specify upper bounds on dependencies but applications should. I use Poetry for all my projects, but I agree that it exacerbates the issue somewhat with its default npm-style version syntax.