It seems there is no automatism that check if the package version is not in sync with the upstream version, isn’t it?
The packages check or the CI can do this, isn’t it?
e.g.: If we add in the manifest.json the upstream URL, like: https://github.com/FOO/BAR/releases the we can compare the manifest version with the last tagged version.