Comment by dboreham

You do if it's a JS project because every patch release of every dependency makes breaking API changes.