01 Nov 2026Security8 min
Every new npm and PyPI release now waits seven days before our gate hands it to anyone at work. Why a week, how the gate works, and the 71 downloads it refused for being too new.