[Feature] To help prevent downloading hijacked or broken packages, warn if the package has been released less than 72 hours ago.

[tabarra]

Recently the ecosystem is getting quite a lot of packages hijacked.
One way I try to prevent using those packages is not updating to any version released less than 72 hours ago, which is time enough for the maintainers of any big package to realize what's up and unpublish the contaminated version on npm.

This could be also very useful for people that like to download only versions that have already passed the "real world smoke test".

I propose that on the update prompt, you warn if the package was released less than 72 (blue), 48 (yellow) or 24 (red) hours ago.

I would also see this as a great feature!

[IchiiDev]

I have implemented it on my fork, I plan to submit a PR once I got some sleep ! 😉

[ImLunaHey]

@th0r any chance on this being looked at soon?

[th0r]

Sorry, I don't have time for it right now, but PRs are welcome.

[ImLunaHey]

there is a PR #81 but it's closed 🤔

[IchiiDev]

@th0r
Sorry, I don't have time for it right now, but PRs are welcome.

I checked the changes I made 3 years ago, you can go ahead and review it when you have the time ! #81