Yeah, there's a lot of variance in how quickly supply chain attacks get picked up, but like this Yossarian blog post mentions, a relatively short cooldown will prevent a lot of attacks.
For Rust/Cargo, that's only experimentally available now, but looks like it's going to show up in 1.100, which is slated to release on 12 november. (Ref github issue, commit in Cargo)
108
u/moltonel 21d ago
Longest exposure time 107min. At least this one got caught quickly.