A developer describes implementing a seven-day cooldown proxy for public package registries like npm and PyPI to mitigate software supply-chain attacks…