Minimum Release Age is an Underrated Supply Chain Defense | Dani Akash

A 7-day package delay would have blocked installs in most short-lived malicious publish attacks from the last 8 years