Comment by datenarsch

Well other package managers don't automatically update packages like NPM does though but pin the exact version that you installed.