feat(update): add minimum age option

[airtonix]

Description

So this is trending causing hysteria and finger pointing.

• https://www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-packages-compromised
• https://news.ycombinator.com/item?id=45260741

Something that came out of the comment thread was to limit updates to packages that are at least of a certain age.

What's the chance we can explore this for syncpack?

Suggested Solution

unsure?

Optional comments

No response

Code of Conduct

• I agree to follow the Code of Conduct

[JamieMason]

It's a good idea, happy to add it

[CHE1RON]

This would be great to have!

It might also make sense (at least for pnpm users) to respect the minimumReleaseAge and minimumReleaseAgeExclude config options (see blog post announcing v10.16) - or take inspiration from them! 🤔

[tobeycodes]

It would be nice if it would also respect the minimumReleaseAge in bunfig.toml