According to the docs, `filterResults` doesn't currently include date information so you cannot add a filter (i.e. dependabot's `cooldown` feature). In the light of recent events, having this in combination with `--target semver` would result in a nice, safer alternative to `npm update`.