Minimum Release Age is an Underrated Supply Chain Defense | Dani Akashdaniakash.comA 7-day package delay would have blocked installs in most short-lived malicious publish attacks from the last 8 yearssecurity supplychain javascript dependenciesApr 1, 2026