Post

set a minimum age for your different package registries; it's not a bad idea actually, against supply chain attacks > cooldowns.dev