We stopped installing npm packages less than a week old