npm supports this now as well, with e.g. `min-release-age=7` in `.npmrc`
not if you have internal repos?