diff --git a/.npmrc b/.npmrc
index cffe8cd..c87413a 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1 +1,4 @@
+# Delay installs of newly published packages to reduce exposure to fresh
+# supply-chain compromises.
+min-release-age=7
 save-exact=true