We use changeset to provide versioning for our packages with fixes, features and major release in case of breaking changes. The latest package is always the better one.
We also provide talend-scripts upgrade:deps scripts to make it easier to keep our packages and apps aligned and updated.
The script comes with options about security use cases, so please read the documentation first.
Distance to latest from npm is added on a dependencies.txt file on each upgrade PR.
For information on how to report a new security problem please see here. Our existing security advisories are published here.