i think people will be fine if they have to manually re-run a command to update the NPM modules they depend on (even internal ones)