09:41
2026-04-30
gist.github.com
developer-tools
Configuring minimum release age across npm, pnpm, and yarn
Setting a minimum release age (cooldown) on dependencies is a low-effort, high-impact defense against supply-chain attacks, as most malicious packages are detected and removed within hours. All three …