we have this thrust on us ... we get pull requests for point release updates but it misses entire versions it decides that packages that have legitimately been forked by a manufacturer should be replaced by the original package because it has a version bump generally it been a pain in the backside