As far as debian only once in a while getting new grass from upstream, I think you can forget about that, unless we are to be always so old and behind as before. (Bugs returned to sender marked "fixed long ago".) Or go back to providing two packages instead of one.