---
id: 2475
title: "Safe Chain now enforces a minimum package age before install"
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/safechain-minimum-package-age"
published_at: "2025-11-28 00:00"
tags: ["supply-chain", "devsecops", "malware", "npm", "aikido", "package-registry", "safe-chain"]
phying_url: "https://phying.com/item/2475"
lang: en
---

# Safe Chain now enforces a minimum package age before install

## Summary

Safe Chain holds npm versions published in the last 24 hours for analysis before install, falling back to older clean versions—closing the timing window attackers exploit in supply chain campaigns.

## Intelligence Metadata

- **Sources:** aikido.dev
- **Published:** 2025-11-28 00:00
- **Original:** https://www.aikido.dev/blog/safechain-minimum-package-age
- **Phying News:** https://phying.com/item/2475