Datasworn may receive breaking changes on any version change (consistent with its 0.x.y semver). However, the semver notation in package.json indicates compatibility with anything of the same major (0), so NodeJS dependency resolution behaves in unintended ways.
It'd be better to require an exact version match, which would at least provide a useful error message rather than silently resolving to functionally incompatible versions of various datasworn packages.