Wild claim that setting the minimum age to 7 days will result in me "never" getting a supply chain npm vuln.
In this case it would have, because the compromised packages were pulled within 3 hours.
There is a “fresh” in there
In this case it would have, because the compromised packages were pulled within 3 hours.