Even if it would use semver, you should not auto-install or update packeges in your production environment without having it tested first. Semver is just a prom

Even if it would use semver, you should not auto-install or update packeges in your production environment without having it tested first. Semver is just a promise other people are making, and in production you shouldn't rely on that IMO.