Added
New projects only install dependencies older than 7 days
When you create a new project, only dependencies published at least 7 days ago are installed. Combined with the new pre-upload check in helix deploy, this reduces the risk of pulling in compromised or unstable packages that were published moments ago. If a dependency is too new, the deploy will warn you before anything is uploaded.