Author here: I will appreciate any feedback on this approach and especially what else can be done (a Moon shot even). Comment below the blog post, open an issue, etc.
That's is the main feature - running unit tests against a dependency. Because unless you follow semver religiously and use semantic-release and dont-break - your version is human assigned. Thus a patch upgrade can easily break your stuff.