Composer can now refuse to install a package version because it's too new. 👀
Composer 2.11 added dependency cooldowns.
You can tell Composer to skip package versions released in the last 24 hours when running "composer update" or "require".
Gives malicious releases some time…
Commit
bb9f8a6
The period takes a string like "6 hours" with the units second, minute, hour, day or week, or an integer number of seconds