NPM's new 20-minute publishing delay spawns the best joke about open-source code review

cocktailpeanut · x · 2026-10-27

cocktail peanut notes the internet is getting slower: NPM packages used to be usable immediately after publishing, but now there's a 20-minute wait — possibly throttling to defend against AI-powered cyberattacks. The replies went viral: "that 20 min delay is the only code review most packages ever get" and "20 minutes is about how long it takes to actually read the postinstall script, so honestly fair." A mix of real supply-chain-security friction and sharp satire.

Related event: NPM package publishing now delayed 20 minutes, developers complain(2 posts)→

Original post →

More from Fun

Fun channel →