I personally don't trust package maintainers to follow semver. Twice bitten and all that. Feel free to adjust this to your own liking.