Older versions get deleted from wpackagist

Hi there,
We use wpackagist to install cmb2 automatically.
Because we do a security audit to all code who we use, we don’t automatically update to newer versions of plugins.
While the security audit for cmb2 happens though, automatic deployment stops because the previous versions dissapear from wpackagist.
We don’t see that beheaviour in any other of the packages we use. Do you have any idea why the previous versions of cmb2 dissapear from the wpackagist? Do you delete previous tags?

Thanks

The page I need help with: [log in to see the link]