I also felt Tim was tempting fate when he said "You can import directly from a self published URL. Of course it's the responsibility of the publisher to never change the semantics of that code in an incompatible way."

I just can't imagine that working at scale. I bet they add semantic versioning support pretty quickly.