The module cache should periodically get that the tag still matches the upstream repo. If it doesn't then show a warning when installing or on the docs page.