Tag

dependency-cooldown-policy

Safeguard articles tagged "dependency-cooldown-policy" — guides, analysis, and best practices for software supply chain and application security.

1 article

SBOM

Software Dependency Cooldown Policies

A dependency cooldown policy delays new package versions for a set window so the ecosystem can catch malicious releases before they reach your build pipeline.

Jun 6, 20267 min read