Checklist
What is the idea?
Once mamba introduces support for it (mamba-org/mamba#4254 mamba-org/mamba#4228) it would be nice to allow conda-lock to leverage this option to generate lock files that do not include any recently published package at the time of the command execution.
Why is this needed?
This will help reduce exposure to OSS supply chain attacks by giving more time for security researchers and project maintainers to detect and yank packages that are corrupted with malware.
What should happen?
A CLI option named -exclude-newer that follows the equivalent options in conda & mamba.
Additional Context
No response
Checklist
What is the idea?
Once mamba introduces support for it (mamba-org/mamba#4254 mamba-org/mamba#4228) it would be nice to allow conda-lock to leverage this option to generate lock files that do not include any recently published package at the time of the command execution.
Why is this needed?
This will help reduce exposure to OSS supply chain attacks by giving more time for security researchers and project maintainers to detect and yank packages that are corrupted with malware.
What should happen?
A CLI option named
-exclude-newerthat follows the equivalent options in conda & mamba.Additional Context
No response