I'm a maintainer of some other libraries, which would take a dependency on cryptography. What versioning scheme does cryptography use? Seems not Semantic Versioning, because I see many "backward incompatible" changes without major version bump. Then, how should I declare (the upper bound) of versioning dependency of cryptography in my downstream library?
cryptography>=0.6,<???