Comment by arriu

This is career suicide and undermines the ecosystem due to the loss of trust.

Honest question, what can be done to address this type of issue? Lock fines are great and all but people rarely dig into their dependencies when upgrading.

How are you guys dealing with upgrades?