The verdict is the opposite of what Jon said. 

NPM could care less about git tags and version commits, only looking at the version in `package.json`. 

Bower likewise doesn't care about version commits, but is specific about the git tags.

**tl;dr**: Version commits can be anything we like, and git tags must only be a semver compliant version number with no leading characters.