💭 Package Managers Need to Cool Down
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

!https://simonwillison.net/2026/Mar/24/package-managers-need-to-cool-down/

Date: March 31, 2026

Package Managers Need to Cool Down Today's LiteLLM supply chain attack inspired me to revisit the idea of dependency cooldowns, the practice of only installing updated dependencies once they've been out in the wild for a … Simon Willison’s Weblog · simonwillison.net

2026, finding the balance between fixed bugs and zero days. There is very unlikely ever a reason you need to be running bleeding edge packages in prod most package managers now support cool downs.

NOTE
│ This post is a thought </thoughts/>. It’s a short note that I make about someone else’s content online #thoughts </tags/thoughts/>