just dont use latest... old oackages can be malicious, benign ones tho... they get malicious generally on 'latest'. not on old versions.

maybe its better to disallow latest than use age as a metric.