...as long as your community dependencies never happen to depend in-turn on differing major releases of the same module. This is absolutely a show-stopper, and dep critics were right to highlight it. That these critics might be mostly Googlers in this specific case would seem to be a red herring.