Pixi now supports a dependency cooldown, I think that might be useful to include as a safety measure.
The biggest improvement we shipped in Pixi v0.67.0 is the ability to use relative time for the exclude-newer feature. This means you can now wait for packages to “mature” and security issues to be discovered in the ecosystem before upgrading your pixi lockfiles. Setting exclude-newer = “7d” will wait for seven days before pulling in new packages.
This is simple to implement.
Pixi now supports a dependency cooldown, I think that might be useful to include as a safety measure.
This is simple to implement.