This will work if you are working alone on the project, but once the more people start contributing, and you have several branches with their own commits and version changes. We had this problem at my office before and then decided to bump the project version only on prod releases instead on each merge/pull request.
Also, forgive for my nitpicking but running npm patch/minor/major every time you commit something is not automatization.
For further actions, you may consider blocking this person and/or reporting abuse
We're a place where coders share, stay up-to-date and grow their careers.
This will work if you are working alone on the project, but once the more people start contributing, and you have several branches with their own commits and version changes. We had this problem at my office before and then decided to bump the project version only on prod releases instead on each merge/pull request.
Also, forgive for my nitpicking but running
npm patch/minor/majorevery time you commit something is not automatization.