Against dependency cooldowns as a response to supply chain attacks