What are supply chain best practices

I’ve been playing around with NixOS, with an eventual goal of configuring a fully riced and useable desktop. I’m pretty new to the nix system (for lack of a better phrase), and recently HN has brought to my attention just how easy it is to fall into supply chain attacks. I was wondering what are the best practices to avoid supply chain issues? Is there a way to set one’s nix flakes up so packages must be up for at least 10 days before pulling new versions? Thanks for reading this.