npm needs an analog to pnpm's minimumReleaseAge and yarn's npmMinimalAgeGate

With the growing number of supply chain attacks in the npm ecosystem (for example, Shai-Hulud ), package managers like pnpm and yarn have added a very handy configuration option that prevents the install of new packages: minimumReleaseAge and npmMinimalAgeGate , respectively. These options allow developers to specify the minimum age of a dependency before it gets installed. For example, a…