TLDR Tech / InfoSec
Package Managers Need to Cool Down
Introducing a one-week delay before new package versions become installable can effectively mitigate most supply chain attacks by providing the community and security vendors sufficient time to identify and report issues.
Read the full story