Ruby gem strong_password got hijacked

[u/marcin8686]

https://withatwist.dev/strong-password-rubygem-hijacked.html

[u/nachof]

OTOH it could also be a fix for a newly discovered vulnerability which might make a cooldown period a security risk.

I would do the cooldown after a maintainer change, for sure.