Hacker News Reader

is it only when a package is have wild cards like *, ^ in versions or all the time?

All the time. Even if you use a specific version, wouldn't you like to be in the know about the latest version, so you may consider upgrading?