Composer can now refuse to install a package version because it's too new. 👀
Composer 2.11 added dependency cooldowns.
You can tell Composer to skip package versions released in the last 24 hours when running "composer update" or "require".
Gives malicious releases some time…
Commit
b54c4a7
Does it also accept days or is it only hours?
The period takes a string like "6 hours" with the units second, minute, hour, day or week, or an integer number of seconds
commit b54c4a7