NOTHING INSTALLS UNTIL IT'S A WEEK OLD

Summary from the TLDR Dev newsletter

A company-wide registry proxy delays new npm and PyPI releases for seven days, buying time for malicious versions to be discovered while tracking downloads and supporting version blocklists.