core: Wait 3 days before installing new package versions to reduce supply chain risk

2026-05-14 16:42:38 +00:00 · 2026-05-12 12:50:32 -04:00
parent 0ce614a280
commit 5a4596c879
1 changed files with 2 additions and 1 deletions
--- a/bunfig.toml
+++ b/bunfig.toml
@@ -1,6 +1,7 @@
 [install]
 exact = true
+# Only install newly resolved package versions published at least 3 days ago.
+minimumReleaseAge = 259200

 [test]
 root = "./do-not-run-tests-from-root"
-