2026/04/28 → pip introduced dependency cooldowns
2026/03/25 → Protect against supply-chain exploits using uv