Package Managers Need to Cool Downnesbitt.ioA survey of dependency cooldown support across package managers and update tools.package security ecosystems deepdiveMar 25, 2026