Software experts warn dependency cooldowns exploit unconfigured users in supply chain defense