Following the recent supply chain attacks through npmjs, I figure it would be interesting to optionally display the publish date of the returned packages
I already tested that the npmMinimalAgeGate prevents recent enough packages from being displayed, but the additional info would be a step further in prevention.
I didn't get into the source code yet so I don't know whether it'd be a costly feature.
What do we think about this?
Following the recent supply chain attacks through npmjs, I figure it would be interesting to optionally display the publish date of the returned packages
I already tested that the
npmMinimalAgeGateprevents recent enough packages from being displayed, but the additional info would be a step further in prevention.I didn't get into the source code yet so I don't know whether it'd be a costly feature.
What do we think about this?