It's weird, because I'm not aware of any OSS licenses or authors who say "you are expected to upgrade to the most recent release of this package as soon as it comes out so that you'll get infected with any malware it might contain."

Good thing the internet is here to lecture me about all the secret obligations I have incurred by creating and using open source software!