core: Wait 3 days before installing new package versions to reduce supply chain risk