This should be derived from package.json, where tools like `npm version` read and modify it.