A Package Cooldown Also Delays Your Security Fix
Composer's new cooldown policy holds back fresh releases so malware gets caught first. It holds back the patch for a real vulnerability too. Here is how to set the wait, who on the team may skip it, and how to leave a record when they do.
Shinjae Kang
Read