The 72-hour dependency cooldown is security theater that breaks your builds

Last week, the continuous integration pipeline I set up failed because a package that I had locked...