I'm not sure what you're asking. The incident in question had nothing to do with PVP compliance or lack thereof. The proposal on the table is pretty close to what I use in practice right now. If this proposal is approved, I would likely start adding in upper bounds in accord with what the new standards would be. Right now, in cases of mostly-stable packages like text and bytestring, I've simply left off the upper bounds entirely.

Michael