I'm really confused by this "Code Analysis" section. You're saying "in theory it's possible to extract semver from metadata, and do code analysis" but without concrete details to make it specific, or some contextualization in the bigger picture of "Remote Packages", I'm not sure what you're describing or advocating for.