202306/29 Beyond semantic versioning: updatePolicy Some random thoughts on how to make NPM package updates a bit safer