The cooldown is to allow vulnerabilities to be discovered. So auto update on passing tests, which should include an npm audit check.