---
title: "CFOtech: Cloudsmith adds cooldown policies for software supply chain"
description: "Cloudsmith has introduced new policy controls for software supply chain governance in its artifact repositories. The update adds cooldown policies, policy templates, and expanded evaluation triggers.\n\nThe move comes as attacks on open source package ecosystems renew attention on how quickly malicious code can spread through developer tools and build pipelines before security teams can respond."
canonical_url: "https://cloudsmith.com/company/press/cfotech-cloudsmith-adds-cooldown-policies-for-software-supply-chain"
last_updated: "2026-09-18"
---
# CFOtech: Cloudsmith adds cooldown policies for software supply chain