To mitigate risk from compromised credentials, the platform now rejects new file uploads for any release older than 14 days. This change prevents malicious actors from injecting poisoned code into long-stable software packages.