From 5a4596c879a69aa20343060e5b5d5efeedfbbc0e Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Tue, 12 May 2026 12:50:32 -0400
Subject: [PATCH] core: Wait 3 days before installing new package versions to
 reduce supply chain risk

---
 bunfig.toml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bunfig.toml b/bunfig.toml
index 36a21d9332..363579bbf0 100644
--- a/bunfig.toml
+++ b/bunfig.toml
@@ -1,6 +1,7 @@
 [install]
 exact = true
+# Only install newly resolved package versions published at least 3 days ago.
+minimumReleaseAge = 259200
 
 [test]
 root = "./do-not-run-tests-from-root"
-