We should all be using dependency cooldowns November 28, 2025 Articles Use dependency cooldowns (for example Dependabot or Renovate) to block most open source supply chain attacks by delaying new releases several days.