chore: adjust pnpm/pip/uv min-release-age

https://cooldowns.dev/
2026-07-10 14:42:40 +02:00 · 2026-06-03 18:12:11 +08:00
parent 92aca13c40
commit 839bd3c330
2 changed files with 15 additions and 3 deletions
@@ -1,7 +1,14 @@
 _: {
-  # use mirror for pip install
+  # use pypi mirror
+  # filter packages via upload time for supply-chain security
  xdg.configFile."pip/pip.conf".text = ''
    [global]
    index-url = https://mirrors.bfsu.edu.cn/pypi/web/simple
+
+    [install]
+    uploaded-prior-to = P2D
+  '';
+  xdg.configFile."uv/uv.toml".text = ''
+    exclude-newer = "2 days"
  '';
 }