I'd like to ask a follow up / clarifying question -

In general, developers install new packages without specifying a version constraint, e.g. - npm i underscore

which would return the latest compatible version given the other packages that may already be installed. Those packages and versions are then frozen for deployment.

Does the statement "From an API/technical standpoint, it's simply not possible to "hide" the fact that X is latest" mean that if the resolved version that npm i underscore chose was released in the blocking period, the npm command would 400?