Once the packages are published to NPM, they don't have the `pnpm-lock.yaml` to fix dependency versions. Which means that any dependency with `^` gets auto-upgrade to the latest matching minor, which can cause issues like [this](https://github.com/node-cache-manager/node-cache-manager/issues/611).