Browse Source

core: Wait 3 days before installing new package versions to reduce supply chain risk

Dax Raad 5 months ago
parent
commit
5a4596c879
1 changed files with 2 additions and 1 deletions
  1. 2 1
      bunfig.toml

+ 2 - 1
bunfig.toml

@@ -1,6 +1,7 @@
 [install]
 exact = true
+# Only install newly resolved package versions published at least 3 days ago.
+minimumReleaseAge = 259200
 
 [test]
 root = "./do-not-run-tests-from-root"
-