Reminder to use a cooldown period: https://dylancastillo.co/til/securing-package-managers.html