防御供应链投毒
“最小发布时长”（Minimum Release Age） 是应对软件供应链攻击的一种简单且被低估的防御手段。
https://daniakash.com/posts/simplest-supply-chain-defense/
Daniakash
Minimum Release Age is an Underrated Supply Chain Defense | Dani Akash
A 7-day package delay would have blocked installs in most short-lived malicious publish attacks from the last 8 years
