🔗 Hex v25 released

Hex 2.5 focuses on enhancing security against supply chain attacks, a growing concern in package registries. This release introduces three vital layers of defense. First, security advisories appear directly in your terminal during dependency updates, marking packages with known vulnerabilities. Second, a release-age cooldown prevents newly published versions from being used until they undergo a vetting period, reducing the risk of malicious releases. Lastly, organizations can now enforce centralized dependency policies, ensuring consistency across projects and mitigating risks from compromised packages. The article details how to set up these features within mix.exs and offers commands like mix hex.policy show to maintain visibility on active policies. With these updates, developers can significantly bolster their application security in a landscape rife with threats.