The other consideration that would be useful is an explicit api for a developer to freeze the release, to prevent new file upload.